Release: GreyMatter Discover

What’s new: Discover provides unified visibility across assets, identities, and exposures in all environments. Includes intelligence-enriched context, prioritized recommendations, and in-platform remediation actions.

Results: See all assets across cloud, endpoint, identity, and SaaS tools to enable you to resolve vulnerabilities, misconfigurations, missing EDR agents, and stale accounts before they become attack paths.

Read More about Discover >


Release: Threat Risk Scoring

What’s new: Threat Risk Scoring calculates and delivers unified, explainable risk scores for assets and identities. The score reflects the overall cyber risk associated with an asset or user based on the most current and relevant data.

Results: See risk scores on the Assets & Identities page and the Discover page, along with detailed explanations of the assigned risk scores.

Read the Documentation >


Release: Agentic Memory

What’s new: Agentic Memory transforms GreyMatter into a smarter, more personalized system that learns continuously from your feedback and unique operational needs.

Results: Agentic Memory increases the accuracy of your alert management and analysis by remembering your context, preferences, and historical feedback.

Read the Documentation > 


Release: Agentic Automated Response Playbooks

What’s new: Agentic Automated Response Playbooks (ARPs) empowers Agentic AI within GreyMatter to execute customer-approved response actions at any point during its investigation.

Results: Containment decisions are made instantly and in context, resulting in dramatically reduced MTTC, fewer mistakes, and a more balanced, risk-aware response posture.

Read the Documentation >


Release: Emergency Contacts

What’s new: Emergency Contacts lets you define a top-down list of who to contact and in what order, as well as manage and update contacts directly in the platform to keep the emergency list current when teams or roles change.

Results: You can now create and manage a prioritized list of people to be contacted in the rare event of an emergency to ensure your organization can be reached quickly when it matters most.

Read the Documentation >


Enhancement: Multi-Entity Alert Routing

What’s new: Following the initial release of alert routing for multi-entity customers in July, this new release introduces enhanced routing configurations, inherited rule visibility for entities, and visibility into inherited shared integrations.

Results: You can route alerts generated from a single source technology to any child entity. This custom routing gives multi-entity customers more control over alert workflows without needing to segment shared technologies, while child entities maintain visibility into detection coverage.

Read the Documentation >


Release: Agentic Teammates - Intel Research

Note: This functionality is limited to customers with access to Agentic Teammates

What’s new: GreyMatter Agentic Teammates now includes Intel Research, the first role-aware persona. This feature delivers personalized intelligence tailored to IR teams and analysts to support faster, data-driven decision-making.

Results: Users gain full visibility into how reports are generated, with options to review, share, and ask follow-up questions for deeper insight.

Learn More About Agentic Teammates >


Direct Source Connections

Source

Supported GreyMatter Capabilities

Trellix Endpoint Security (HX) Integration Guide

Respond, Detect

Cato Secure Access Service Edge

Respond, Intel