Discover - Unified Asset, Identity and Exposure Visibility
Discover provides unified visibility across assets, identities and exposures in every environment, with intelligence-enriched context, prioritized recommendations, and in-platform remediation. Teams can resolve vulnerabilities, misconfigurations, missing EDR agents and stale accounts before they become attack paths.
Discover - Threat Risk Scoring
Threat Risk Scoring calculates a unified, explainable risk score for each asset and identity based on the most current and relevant data. Scores and their explanations appear on the Assets and Identities and Discover pages.
Platform - Multi-Entity Alert Routing
Alert routing for multi-entity customers now includes enhanced routing configurations, inherited rule visibility for entities, and visibility into inherited shared integrations. Alerts from a single source technology can be routed to any child entity without segmenting shared technologies, while child entities keep sight of their detection coverage.
Agentic Teammates - Threat Intel Analyst Teammate
Threat Intel Analyst is the first role-aware Agentic Teammate persona, delivering personalized intelligence tailored to IR teams and analysts. Users see how each report is generated and can review, share, and ask follow-up questions. Available to customers with Agentic Teammates.
Platform - Emergency Contacts
Emergency Contacts lets customers define a prioritized list of who to contact and in what order, and keep it current directly in the platform as teams and roles change. Organizations can be reached quickly in the rare event of an emergency.
Investigate - Agentic Memory
Agentic Memory lets GreyMatter learn continuously from customer feedback and operational context. Alert management and analysis become more accurate as the system remembers preferences and historical feedback.
Workflows - Additional Triggers and API Triggering
Workflows now supports Post-Digital Risk Alert Analysis, Post-Phishing Analyzer Verdict, Manual, Health Alert Creation and Task Creation triggers, and any workflow trigger can be fired through the GreyMatter API. Workflows can respond to a much broader set of security and business inputs.
Respond - Agentic Automated Response Playbooks
Agentic Automated Response Playbooks allow GreyMatter's Agentic AI to execute customer-approved response actions at any point during an investigation. Containment decisions happen instantly and in context, reducing MTTC and errors.
Direct Source Connections
Source | Supported GreyMatter Capabilities |
|---|---|
Trellix Endpoint Security (HX) | Detect, Respond |
Cato Secure Access Service Edge | Intel, Respond |
