News
Summaries of public announcements, with links to the original source. Updated monthly.
Straight answer
Twelve public announcements from March to September 2026, newest first. Each summary says what was announced and what it means for a buyer comparing tools. Scores on the matrix change only when public vendor material changes.
Vega added Wiz attributes such as exposure, privileges and sensitive data to its detection and investigation workflows. For buyers with Wiz, this is a named integration to ask about in a demo, since Vega's public connectors page does not name platforms.
Source: Vega blog
Mars published a post introducing MARS playbooks, built around attacks that fail a hypothesis rather than fire an alert. For buyers, it is a sign of hypothesis-led hunting alongside intelligence-led hunts; ask to see a playbook run.
Source: Mars Security blog
Mars released Real-Time Intel-Based Detection, which converts advisories into ATT&CK-mapped rules backtested against 30 days of the customer's own data, at no added cost to customers. Buyers can compare the stated 30-day backtest with how other tools test a rule before it goes live.
Source: Security Boulevard
MITRE's updates page dates v19.2 to 6 August 2026. It adds groups including ShinyHunters and TeamPCP and related supply chain software. Buyers checking coverage views can ask whether a tool tracks point releases as well as major versions.
Source: MITRE ATT&CK
Vega released Detection Skills, an open specification built on the Agent Skills format, with a library of more than 50 skills. An open format is something buyers can read before a call.
Source: Vega blog
Anvilogic 8.0 spans onboarding, search, detection and investigation, and adds Elastic, CrowdStrike LogScale and Dynatrace to federated search, plus case management. Buyers on those platforms can now check them against Anvilogic's in-place search list.
Source: Anvilogic
Helix lets Nebulock's agents query vulnerability and security tools when needed instead of ingesting that data ahead of time. It is relevant to the data reach criterion; ask which sources Helix covers today.
Source: Nebulock blog
Cotool Router adds fallback across model providers, access to open-weight models and model choice based on evaluations. Buyers weighing AI agents can ask how model choice and fallback affect the consistency of results.
Source: Cotool blog
Nebulock announced a $25 million Series A led by FirstMark, alongside insider risk features, correlation rules and a Command Center view. The new features are worth checking in a demo against the published documentation.
Source: Nebulock blog
ATT&CK v19 replaced the Enterprise Defense Evasion tactic with Stealth and Defense Impairment and lists 15 Enterprise tactics and 222 techniques. Coverage views built on the older tactic list need updating, which is a fair question for any vendor.
Source: MITRE ATT&CK
Artemis came out of stealth with $70 million in combined seed and Series A funding, with the Series A led by Felicis. It publishes a detailed connector list that separates ingested and queried-in-place sources, which helps buyers check data reach.
Source: Artemis Security blog
Cotool announced a $7.4 million seed round led by Andreessen Horowitz. For buyers, funding news says nothing about fit; check the product against the matrix criteria in a demo.
Source: Cotool blog
Editorial assessment · Desk research from public vendor material, last reviewed September 2026