Engineering-led security and continuous threat exposure management

Acumen Cyber, a cyber security service provider, has announced a strategic partnership with AttackIQ, a provider of adversary-informed Continuous Threat Exposure Management (CTEM). The collaboration aims to improve how organisations identify, validate, and disrupt potential attack paths that adversaries may use across enterprise environments.

The increasing use of AI has contributed to faster exploitation of security exposures, with threat actors able to operationalise vulnerabilities more quickly than many organisations can respond. As a result, traditional approaches that rely primarily on vulnerability counts, severity ratings, and periodic assessments are increasingly viewed as insufficient. Current cyber defence practices place greater emphasis on continuously understanding which exposures are most significant, how they could be used to access critical assets, and whether existing security controls are effective against those threats.

This partnership combines Acumen Cyber’s engineering-led security operations capabilities with AttackIQ’s CTEM platform, enabling organisations to carry out continuous validation and threat-informed defence. The approach supports ongoing assessment of defensive controls, identification of significant attack paths, and evaluation of whether exploitable opportunities are being reduced over time.

By integrating AttackIQ’s CTEM capabilities into its security operations, Acumen Cyber is shifting from periodic exposure assessment to a more continuous, evidence-based model focused on resilience. This includes validating preventive and detective controls against adversary techniques, mapping potential attack paths, and prioritising remediation based on demonstrated impact rather than solely on theoretical risk.

Acumen Cyber’s approach emphasises regular testing and validation against real-world adversary techniques. Within the partnership, engineers map techniques using frameworks such as MITRE ATT&CK to assess whether security controls can effectively prevent or detect them, and to identify where control gaps could lead to exploitable paths.

Through the AttackIQ Threat Debt Index, organisations can use an analytical model to measure accumulated adversary exposure across their environment. The index provides ongoing insight into changes in threat exposure, highlighting where attack paths have been reduced, where new exposures have appeared, and where controls are effectively mitigating risk.

Overall, the collaboration reflects a shift toward more continuous, evidence-based cyber defence practices, with a focus on validating security outcomes and reducing exploitable opportunities before they can be used by adversaries.