We are happy to announce that 22 Security has been granted access to Mythos for defensive activities through the Anthropic Cyber Verification Program.
We had already built a threat intelligence tool where we alert companies of vulnerabilities and misconfigurations that seem to provide an initial foothold into their production environments. Since starting about 2 months ago, a full 20% of security teams have taken action based on our observations within 2-3 days. That’s 60 companies so far! This includes everything from claimable subdomains, to reachable bastion hosts, EOL software and operating systems broadcasting their versions, and mistakes in mail configurations that allow spammers to impersonate their domain. Each disclosure comes with a security and compliance based reason to consider remediating the observation.
Mythos has enabled us to take our analysis to the next level. The platform creates deterministic findings based on everything I’ve observed after evaluating hundreds of companies’ cyber controls, audit reports, pen tests, everything I’ve learned about the root cause of big breaches, and even running a couple of security programs myself. With Mythos, we can more quickly reason about findings and their potential impact, which allows us to reach more of the right teams even faster.
22 Security offers a range of services including security advisory, compliance assessments, and penetration testing. Let us know if you have a project coming up and we will be happy to scope something out!