Why Cybellum was recognized as a Product Security AI Leader

Recently, Cybellum was recognized by CyberSympusioms as a leading cybersecurity AI vendor. The below blog is a summary of our submission for CyberSympusioms, laying out our approach and vision for AI and product security.

At Cybellum we live and breathe product security, our offering includes a software platform for product cybersecurity tailored for device manufacturers such as automotive OEMs and medical device producers. Both our platform and our managed services are designed to help teams manage product risk and compliance across the entire lifecycle, addressing key areas like asset and SBOM management, assurance and vulnerability management, regulatory evidence creation, and incident response. By aggregating both asset and risk data from multiple sources, we enable teams to manage everything in one central platform.

As the power of Gen-AI became clear to all, we began asking ourselves one question – what would be the best way to incorporate AI into the product security workflow, in order to make the product security more efficient?

Inside our product, we incorporate AI capabilities in two ways – by empowering security with AI, and by empowering AI with security. Here’s what we mean by that:

With the release of version 3.1, our platform has significantly advanced its AI capabilities. Our Gen AI assistant, called “Ask Roman” helps streamline product security processes by automating tasks such as risk management, evidence creation, and vulnerability monitoring. These enhancements allow for quicker identification of vulnerabilities, efficient monitoring for new threats, and AI-driven mitigation recommendations, making the entire process more efficient and less reliant on manual analyst input​.

Our goal is to have AI empower as much the product security process as possible, including, for example, the following areas:

• SBOM CoPilot Insights: This feature enhances SBOM management by offering recommendations for merging duplicate packages, managing multiple licenses, and identifying missing packages​.
• Product Vulnerabilities Identification: One of the most daunting tasks for product security teams is pinpointing only the vulnerabilities that affect their product. Leveraging Cybellum’s vulnerability management engine, Ask Roman allows teams to quickly filter out irrelevant vulnerabilities, and pinpoint the ones that could actually have an impact on your products. Not only that, but you can also continue the conversation, asking the AI to provide more details about that specific query.
• Get mitigation recommendations: Another struggle is finding the right mitigation strategy out of countless possible options. Ask Roman helps with that too, by providing detailed mitigation recommendations and helping you choose the right one. Then, it even allows you to open a ticket to developers.

Cybellum’s platform also focuses on empowering AI capabilities with robust security measures. This includes identifying vulnerabilities in AI packages to ensure that any AI functionalities added to products, such as cars or medical devices, are secure. AI/ML Component Management allows for policy management of GenAI-specific packages and detection of AI-related vulnerabilities. This ensures manufacturers can integrate new AI functionalities securely​.

Our vision for AI in product security is to make every aspect of the product security process more efficient. By leveraging AI to handle the heavy lifting, we aim to reduce the workload on analysts, speeding up vulnerability identification, monitoring, mitigation, and more.This is partly why our managed services are powered by “a human in the loop” framework, where Cybellum experts use AI to produce high quality SBOM or vulnerability reports at scale.

Our dual approach—empowering security with AI and empowering AI with security—ensures that our platform and services evolve continually, helping manufacturers stay ahead in the ever-growing challenge of product security.