Cogent VR-1 is a cybersecurity reasoning model aimed at enterprise security teams who are drowning in individual vulnerability findings but lack the time to figure out which ones actually matter. Given a foothold inside a customer environment, Cogent Security Inc. today introduced Cogent VR-1, a frontier reasoning model trained to find and prove attack paths inside live enterprise environments . The model chains weaknesses across code, cloud, identity, endpoints, and applications to show how an attacker could actually move through a specific environment, then checks whether a proposed remediation truly closes the path or just shifts it elsewhere.
The company is pairing VR-1 with the Cogent AI Harness, a governed runtime that supplies environment context, scoped tools, policy controls, and verification , which is how the model grounds its reasoning in a given organization's crown jewels, identities, and runtime controls rather than reasoning about security in the abstract. Access is being rolled out through the Cogent Frontier Access Program, a limited research initiative for qualified enterprises and defenders, positioning this launch as a targeted rollout rather than general availability. The timing tracks with a broader industry shift where autonomous AI attacks have started hitting real targets and time to exploit has compressed sharply.
Cogent was founded by Vineet Edupuganti, CEO; Geng Sng, CTO; and Thanos Baskous , with Edupuganti and Sng previously worked at Abnormal Security, where Edupuganti led product strategy and Sng built a machine learning fraud detection system used by a large share of the Fortune 500. VR-1 is a natural extension of the company's earlier work on agentic vulnerability management, moving from prioritizing individual findings to reasoning about the full multi-step chains that security teams struggle to reconstruct by hand.
Comments (14)
Sign in to join the discussion.
P
Priya VatsalJul 27, 2026
Mythos-class is a wild naming choice for a security product. Half expect the next release to be named after a Titan and start eating my logs.
K
Kwame O.Jul 27, 2026
The tagline is doing more work than most Series A decks I've seen this month. Actually says something.
L
Lena BorisovaJul 27, 2026
Autonomously chaining weaknesses across five surfaces sounds great until it chains itself into prod and files a ticket to fire the CISO.
A
Arjun RaghavJul 27, 2026
Every pentest vendor for the last decade has said 'we prove exploit paths.' What's the actual novel bit here beyond the model wrapper?
T
Tomás IñiguezJul 27, 2026
Launch page has zero screenshots of the actual product. Bold move to sell a reasoning model with vibes and a hero gradient.
M
Mei WongJul 27, 2026
Been tracking Geng's work since Abnormal. If VR-1 lands the way the demo suggests, the SOC tooling stack gets very interesting very fast.
C
Chidinma OkaforJul 27, 2026
Any plans for a community edition or CLI? DevRel-brain wants to see how the reasoning traces look before I trust anything called Mythos-class.
Y
Yosef KatzJul 27, 2026
Curious how you priced this. Per-environment, per-finding, per-agent-hour? Security buyers hate surprises on the invoice more than on the network.
N
Nadia El-AminJul 27, 2026
Tweet copy is clean but the thread stops after one post. You built a cyber reasoning model and gave it a single-tweet launch, that's discipline or a mistake.
R
Rurik BjörnJul 27, 2026
The remediation half is where every autonomous security tool I've tried quietly gives up and hands you a Jira ticket. Show me VR-1 actually closing the loop.
D
DeShawn MillerJul 27, 2026
If the model can prove the attack path, the logical next step is letting it draft the patch PR. Please tell me that's on the roadmap.
S
santiJul 27, 2026
Is there a paper or a technical writeup on how the chaining is scored? Curious if you're doing something novel or stacking tool-use on top of a frontier model.
H
Hiro TanabeJul 27, 2026
Have a red-team lead in Berlin who's been waiting for a company exactly like this. Are you hiring outside the Bay?
F
Farrah QureshiJul 27, 2026
The launch video's pacing is genuinely good, no stock hacker hoodie footage, no green text raining down. Rare restraint for cyber marketing.
Work With Us
Book an intro call to explore our suite of services. We might have a waitlist.
Cogent
Finding risks is easy. Fixing them is hard.
Finding risks is easy. Fixing them is hard.
Tags
TLVC Rating
Community Rating
No ratings yet
to rate this launch.
Cogent VR-1 is a cybersecurity reasoning model aimed at enterprise security teams who are drowning in individual vulnerability findings but lack the time to figure out which ones actually matter. Given a foothold inside a customer environment, Cogent Security Inc. today introduced Cogent VR-1, a frontier reasoning model trained to find and prove attack paths inside live enterprise environments . The model chains weaknesses across code, cloud, identity, endpoints, and applications to show how an attacker could actually move through a specific environment, then checks whether a proposed remediation truly closes the path or just shifts it elsewhere. The company is pairing VR-1 with the Cogent AI Harness, a governed runtime that supplies environment context, scoped tools, policy controls, and verification , which is how the model grounds its reasoning in a given organization's crown jewels, identities, and runtime controls rather than reasoning about security in the abstract. Access is being rolled out through the Cogent Frontier Access Program, a limited research initiative for qualified enterprises and defenders, positioning this launch as a targeted rollout rather than general availability. The timing tracks with a broader industry shift where autonomous AI attacks have started hitting real targets and time to exploit has compressed sharply. Cogent was founded by Vineet Edupuganti, CEO; Geng Sng, CTO; and Thanos Baskous , with Edupuganti and Sng previously worked at Abnormal Security, where Edupuganti led product strategy and Sng built a machine learning fraud detection system used by a large share of the Fortune 500. VR-1 is a natural extension of the company's earlier work on agentic vulnerability management, moving from prioritizing individual findings to reasoning about the full multi-step chains that security teams struggle to reconstruct by hand.
Comments (14)
Mythos-class is a wild naming choice for a security product. Half expect the next release to be named after a Titan and start eating my logs.
The tagline is doing more work than most Series A decks I've seen this month. Actually says something.
Autonomously chaining weaknesses across five surfaces sounds great until it chains itself into prod and files a ticket to fire the CISO.
Every pentest vendor for the last decade has said 'we prove exploit paths.' What's the actual novel bit here beyond the model wrapper?
Launch page has zero screenshots of the actual product. Bold move to sell a reasoning model with vibes and a hero gradient.
Been tracking Geng's work since Abnormal. If VR-1 lands the way the demo suggests, the SOC tooling stack gets very interesting very fast.
Any plans for a community edition or CLI? DevRel-brain wants to see how the reasoning traces look before I trust anything called Mythos-class.
Curious how you priced this. Per-environment, per-finding, per-agent-hour? Security buyers hate surprises on the invoice more than on the network.
Tweet copy is clean but the thread stops after one post. You built a cyber reasoning model and gave it a single-tweet launch, that's discipline or a mistake.
The remediation half is where every autonomous security tool I've tried quietly gives up and hands you a Jira ticket. Show me VR-1 actually closing the loop.
If the model can prove the attack path, the logical next step is letting it draft the patch PR. Please tell me that's on the roadmap.
Is there a paper or a technical writeup on how the chaining is scored? Curious if you're doing something novel or stacking tool-use on top of a frontier model.
Have a red-team lead in Berlin who's been waiting for a company exactly like this. Are you hiring outside the Bay?
The launch video's pacing is genuinely good, no stock hacker hoodie footage, no green text raining down. Rare restraint for cyber marketing.