Sophos, a prominent player in the cybersecurity sector, has unveiled a new feature called Exploit Path Verification (EPV), which will enhance its Sophos Managed Risk platform. This innovative capability aims to assist security teams in effectively prioritizing and managing vulnerabilities that could be exploited within their environments. The implementation of EPV will leverage OpenAI’s GPT cyber models through the Daybreak Defense Network, providing verified, evidence-based assessments to help defenders address the most critical exposures first. The release date for this feature will be announced in the future.
Security teams are increasingly confronted with a growing disparity between the vulnerabilities they detect and those they are able to remediate. Vulnerability scanners can identify thousands of potential weaknesses and assign severity ratings, yet these scores do not clarify whether a severe flaw is obstructed by a protective measure or if two low-severity vulnerabilities could collectively create a pathway for exploitation. Consequently, security teams often prioritize patches based on generic severity metrics rather than the actual risk posed by the vulnerabilities in their unique environments.
To address this issue, Sophos is developing EPV to bridge the existing gap. This feature will analyze various factors, including asset and patch status, endpoint protection policies, network accessibility, and privileges, as well as the availability of known exploits. It will provide a definitive, evidence-based verdict on exploitability, categorized as follows: Confirmed Exploitable, Blocked by a Control, Not Reachable, or Insufficient Evidence.
Submit Your Press Release
Get your company news, announcements, launches, appointments and events in front of a wider audience.
In addition, EPV will be capable of identifying interconnected paths where multiple lower-severity vulnerabilities could be exploited in tandem. It will evaluate whether a control effectively mitigates a technique class or merely a publicly known proof of concept, and it will generate remediation text ready for ticketing.
Designed to be advisory and supplementary, each verdict provided by EPV will be clearly marked as AI-generated, with the underlying evidence accessible to users. Sophos analysts will review the outcomes to ensure accuracy.
“A significant challenge faced by security teams today is the overwhelming number of findings that require analysis and the difficulty in determining which issues pose the greatest risk,” stated John Peterson, Chief Technology Officer at Sophos. “Exploit Path Verification is being developed to clarify which vulnerabilities in their environment are accessible to attackers, supported by evidence, enabling them to prioritize fixes effectively.”
EPV builds upon Sophos’ collaboration with OpenAI. Since joining the OpenAI Daybreak Defense Network (previously known as the OpenAI Daybreak Cyber Partner Program) in June 2026, Sophos has integrated advanced cyber models into its Managed Detection and Response (MDR) investigations, advisory assessments, and workflows that assist clients in identifying, validating, and addressing vulnerabilities. EPV will build on these initiatives within a product that customers are already utilizing. OpenAI’s GPT cyber models will enhance the assessment of exploitability, while Sophos will provide specific contextual evidence and product controls, with analysts reviewing the generated results.
“Our objective through the OpenAI Daybreak Defense Network is to empower defenders with cutting-edge AI in a secure manner,” remarked McCall McIntyre, Head of Global Cyber Partnerships at OpenAI. “Sophos has demonstrated thoughtful collaboration since joining the program, and Exploit Path Verification exemplifies the application of advanced reasoning to a tangible defensive challenge, ensuring responsible deployment.”
