With 25+ years' experience evaluating, comparing, and recommending software, our expert analysis and verified user data combine for a uniquely trustworthy perspective on enterprise software.
The following trends reflect themes that emerged from conversations, vendor briefings, and conference sessions at Black Hat 2026, with an emphasis on what they mean for CIOs and security leaders.
Cisco released Antares-350M and Antares-1B, two open-weight small language models that locate where known vulnerabilities live inside a codebase. Both are free on Hugging Face and can run locally, allowing organizations to keep proprietary code inside their own environment. Antares finds candidate files. It does not generate fixes. A larger version, Antares-3B, is coming later.
A single-agent endpoint platform combining application allowlisting, ringfencing, ZTNA, patch management, and EDR around a default-deny philosophy. Designed for MSPs and enterprises consolidating endpoint controls in preparation for a Mythos-driven threat environment.
Skyhigh Security announced three platform extensions at RSAC 2026: a hybrid management console, Enterprise Browser Controls, and an integrated security posture management capability.
It has become almost a full-time job to stay current with the glut of news in the AI space. This weekly roundup will get you up to speed on the news and happenings with the Big 5 AI vendors in the last week.
Qualys Enterprise TruRisk Platform combines unified exposure detection across hybrid environments with security-driven patch and patchless remediation, built for enterprises facing AI-accelerated vulnerability disclosure and ready to act on findings at machine speed.
Allure Security, a provider of online brand protection and phishing takedown services, briefed Info-Tech Research Group on how its offerings protect organizations from scams and impersonation activity occurring outside the organization’s owned infrastructure.
Agentic AI breaks three assumptions enterprise infrastructure was built on: traffic direction, monitoring visibility, and identity scope. Cisco Live 2026 made the case that the right place to address all three is the network layer, not a security product bolted on top.
Acronis launched GenAI Protection in April 2026, giving MSPs their first natively integrated tool to discover shadow AI usage, block sensitive data uploads to large language models, control which AI applications employees can access from managed endpoints, and protect against prompt injections.
Cisco Live wrapped up in Las Vegas on June 4, and the theme was pretty consistent across announcements and sessions. Cisco wants to be the layer the agentic enterprise runs on, not a vendor of boxes that carry agent traffic.
Cisco spent the last 18 months acquiring its way into AI security, and at the April 2026 analyst briefing, the full picture came together. Cisco is presenting an end-to-end story for a question that many have not yet considered: What happens when the entity accessing your systems is not a person?
Databricks spent years as a quiet data infrastructure company. It did not chase security headlines. It built the platform where enterprise data lives. Databrick’s Lakewatch, launched in March 2026, is what happens when you stop treating security as a separate application and run it directly inside that platform instead. For existing Databricks customers, this is not a new vendor decision. It is a question of whether the infrastructure they already own can replace a tool they are probably overpaying for.
Every so often something new comes along and becomes a nightmare for security professionals and a major impact on technology leaders, from the birth of email phishing and DDoS attacks to today, when anyone can create agents with outside software or within existing software.
At RSAC 2026, Cisco positioned agentic AI security as a governance and operations problem, not a model problem. For CISOs weighing whether to greenlight agent pilots, Cisco’s approach contrasts sharply with that of Microsoft, CrowdStrike, and Palo Alto by prioritizing control before autonomy.
Palo Alto Networks’ acquisition of CyberArk is one of the most strategically important cybersecurity moves of the AI era. This is more than portfolio expansion. It’s a bid to control the identity layer that now determines whether AI systems remain safe, compliant, and trustworthy. CIOs should treat this as a signal: identity security is becoming the new perimeter of enterprise AI.
Rajesh Ganeshan didn’t walk on stage at the recent ZohoDay (February 2026) to announce a new product or declare a category shift. He spent the time doing something more unusual in enterprise software: explaining why ManageEngine exists the way it does, and why that history suddenly matters again.
CyberArk is anchoring its 2026 growth strategy on machine identity security, elevating PKI, CLM, and AI agent governance while positioning identity as the foundational platform layer in modern zero trust and cloud operating models.
The Cisco AI Summit (Feb. 2026) addressed the accelerating maturity of AI adoption inside enterprises. Leaders across infrastructure, security, design, systems, and geopolitics emphasized that organizations are now moving from exploratory experimentation to a period requiring architectural reinvention, measurable outcomes, and new forms of workforce enablement.
LastPass has been busy adding new features and enhancing current ones. Demand is growing developing for tools that address both traditional credential management and emerging risks like shadow IT. This note focuses on LastPass’ new releases, such as passkey advancements and SaaS Identity Security offerings, while also touching on other relevant initiatives.
When vendors address investors through securities analyst meetings, they generally provide market insights and pragmatic guidance on their place in the market. HPE’s annual securities analyst meeting on October 15, 2025, was no exception as it addressed the securities market for the first time since closing the Juniper Networks acquisition in July 2025.
On July 1, 2025, Arista Networks announced the acquisition of VeloCloud from Broadcom, rounding out its enterprise campus/branch networking suite. One of the leading SD-WAN solutions, with reportedly over 20,000 enterprise customers worldwide, VeloCloud gives Arista a new entry path into the enterprise market.