Quantro VM.Analyst Agentic Vulnerability Management

Quantro Security is based in New York and led by founder and CEO Sasan Padidar and founder and CPO Mehul Revankar, with engineering and product leaders from CrowdStrike, Tenable and Qualys. It tackles vulnerability backlogs where scanners produce many findings but few are validated or fixed.

The agentic platform runs specialist AI agents inside the customer's stack that find, validate, remediate, research and report on security gaps, coordinated by a supervisor. It connects to vulnerability scanners, cloud posture, asset management, identity and pentesting tools, takes business context such as asset ownership, and uses an exploit harness to test whether vulnerabilities are exploitable. Remediation waits for human approval. VM.Analyst was launched as its first product.

• Supervisor and specialist agents: find, validate, remediate, research and report on gaps.
• Exploit harness: builds proof-of-concept exploits to test exploitability.
• Business context intake: asset ownership and crown-jewel designations.
• Tool connectors: vulnerability scanners, CSPM, EASM, ITSM, identity and pentesting tools.
• Own sensors: endpoint sensors and network scanners.
• Human approval: remediation or mitigations wait for one-click approval.

A bank can validate which scanner findings are actually reachable and exploitable before patching. A telecom operator can prioritise vulnerabilities by asset ownership and crown-jewel status. A managed security provider can run the free assessment as a lead-in to client engagements.

• Reduces scanner noise by validating which vulnerabilities are actually exploitable in the environment.
• Uses business context such as asset ownership and crown-jewel designations to prioritise.
• Works with existing scanners, cloud posture and ITSM tools rather than replacing them.
• Free outside-in AI-Native Assessment requires nothing to be deployed.

AI is lowering the cost and time to develop working exploits, so patch backlogs become more dangerous. Vietnamese organisations with growing cloud estates and small security teams struggle to prioritise thousands of scanner findings, which suits agent-assisted exposure management.

10 March 2026: emerged from stealth with VM.Analyst as first product, backed by Gradient (Google's early-stage AI fund). New York headquarters at 136 Madison Ave. Publishes vulnerability research including an AI exploit report.