Top Infosec Products of August 2025: Your Ultimate Security Guide
▼ Summary
– StackHawk released LLM-Driven OpenAPI Specifications to automatically create API documentation from source code using homegrown LLMs.
– Doppel Simulation uses autonomous AI phishing agents to generate hyper-realistic social engineering attack scenarios tailored to organizations and roles.
– Druva introduced DruAI Agents built on Amazon Bedrock to interpret user intent, analyze data, and take action for improved cyber resilience.
– Rubrik Agent Rewind enables organizations to undo mistakes made by agentic AI by providing visibility and the ability to rewind changes to applications and data.
– Trellix expanded its DLP Endpoint Complete data security support to ARM-compatible devices, protecting against data exfiltration and unauthorized software installation.
Navigating the complex world of information security requires staying current with the latest tools and innovations. This month brings a wave of advanced solutions designed to strengthen defenses, automate responses, and adapt to emerging threats across cloud, endpoint, and identity environments. From AI-driven analytics to identity governance, these releases reflect a growing emphasis on proactive, intelligent security.
StackHawk has introduced a significant upgrade with its LLM-Driven OpenAPI Specifications. This feature allows security teams to automatically generate precise API documentation directly from source code. By analyzing repositories with proprietary large language models, it extracts critical API details and produces accurate OpenAPI specs, dramatically expanding testing coverage and reducing manual effort.
Doppel Simulation offers a novel approach to combating social engineering. Using autonomous AI phishing agents, the platform creates highly realistic, customized attack scenarios based on real-world threats. These simulations are tailored to specific organizations and employee roles, enabling businesses to strengthen human defenses against sophisticated phishing and social engineering tactics.
Druva has launched DruAI Agents, built on Amazon Bedrock AgentCore. These intelligent agents interpret user intent, analyze data, and execute meaningful actions. This represents a shift from query-based AI to agentic systems designed for proactive cyber resilience, helping teams automate critical security tasks with greater precision.
Rubrik Agent Rewind addresses a growing concern in autonomous AI operations. Powered by Predibase infrastructure, it provides visibility into AI agent actions and allows organizations to reverse unintended changes to applications and data. This capability is essential for managing risk in agentic environments and maintaining data integrity.
Trellix has expanded its data loss prevention capabilities to include ARM-compatible devices. Trellix DLP Endpoint Complete now offers the same protection against data exfiltration across both x64 and ARM architectures, helping organizations enforce compliance and prevent unauthorized data transfers from a broader range of endpoints.
Brivo Visitor Management, now integrated with Envoy, combines physical security with workplace experience. This unified solution supports secure sign-in processes that scale from small offices to large enterprises, eliminating operational silos and enhancing front-desk security through seamless visitor management.
Prove Unified Authentication simplifies digital identity verification with its innovative Prove KeySM. This cryptographic key remains persistently bound to a user’s identity and secured on their device, enabling continuous, passive authentication without requiring repeated logins, even as devices or credentials change.
Elastic AI SOC Engine (EASE) is a serverless security package that integrates AI-driven detection and triage into existing SIEM and EDR tools. It helps SOC teams uncover hidden threats without requiring migration, adding contextual awareness to accelerate response times.
Black Kite has launched the Adversary Susceptibility Index (ASI), a tool that enables third-party risk management teams to identify which vendors are most vulnerable to specific threat actors. This allows organizations to proactively manage supply chain risks before potential breaches occur.
Riverbed has rolled out AI-powered network observability tools that help IT teams detect and resolve issues in real time. These solutions enhance visibility across enterprise networks, allowing teams to address performance problems before they impact business operations.
ExtraHop has introduced identity-driven detection features that help security operations centers connect disparate alerts to compromised identities. This accelerates incident response by providing a clearer understanding of attack narratives and improving threat correlation.
Descope has enhanced its AI identity security with the Agentic Identity Control Plane. This solution allows security teams to implement policy-based governance, auditing, and identity management for AI agents and MCP ecosystems. It represents a major step toward securing autonomous AI identities at scale.
LastPass SaaS Protect builds on existing monitoring capabilities to help organizations combat shadow IT and AI-related risks. It introduces policy enforcements that shift organizations from passive visibility to proactive access control, reducing unauthorized SaaS usage.
Cloudflare has added new features to its Cloudflare One zero trust platform, enabling secure adoption of generative AI applications. These capabilities allow customers to analyze, understand, and control how AI is used across their organization, balancing innovation with security without compromising privacy.
(Source: HelpNet Security)
