Palo Alto Networks announced Unit 42 Continuous Frontier AI Defense, an agentic offensive security service designed for enterprises that want to leverage gated capability models, including Anthropic’s Claude Mythos and OpenAI’s GPT, to perpetually find, validate, and remediate enterprise exposures before attackers can weaponize them.
Threat actors today are deploying AI to find and exploit vulnerabilities, compressing breach cycles by almost 97% in some cases, from weeks to hours. To help defenders answer the critical question of whether they are prepared for this step-change in cybersecurity, Unit 42 is now offering continuous offensive testing to identify and validate vulnerabilities, pinpoint exposures and attack paths, and then accelerate remediation.
This builds on Unit 42’s Frontier AI Defense, which launched in April and introduced a point-in-time exposure analysis and a subsequent security blueprint that benchmarks current capabilities to help organizations modernize their cybersecurity systems. In August, Unit 42 announced it would expand its Frontier AI Exposure Analysis with OpenAI’s GPT-5.6-Cyber and Anthropic's Claude Mythos 5, giving organizations access to its advanced cyber capabilities.
Key Capabilities of Unit 42 Continuous Frontier AI Defense
Powered by a proprietary multi-model harness that integrates cyber-specialized frontier AI models with Unit 42 threat intelligence and offensive security expertise, the new service delivers always-on threat exposure management to eliminate critical security blind spots. Key capabilities include:
Continuous Testing Engine: Provides a full-estate baseline scan followed by always-on testing as an organization’s environment changes.
Multi-Model AI Harness: Unit 42 deploys a proprietary multi-model harness, the software architecture to route work to the model best suited for the task, improving efficacy and coverage while managing the cost of frontier AI at scale.
Leading Cyber Models: The harness is built around gated capability models, including Anthropic Claude Mythos 5 and OpenAI GPT-5.6-Cyber, as well as open weight models.
Advanced Adversary Simulation: Proves real-world exploitability by validating end-to-end attack paths across first- and third-party web apps, APIs, cloud infrastructure, source code repositories, and network assets.
Accelerated Remediation: Delivers actionable and prioritized fixes, code-level guidance, and virtual patch recommendations. To implement virtual patches before vulnerabilities are publicly disclosed or official patches exist, organizations can pair this with Frontier Virtual Patching.
Proven Efficacy
Palo Alto Networks developed and validated this approach over six months of in-house testing and across more than 100 Unit 42 customer engagements, backed by a $17 million investment in R&D and methodology optimization. During internal deployment within Palo Alto Networks, the company found a year’s worth of exposures in three weeks. In customer assessments, the Frontier AI Exposure Analysis found exposures in 100% of customers. Of those, 37% rated high or critical in severity. Overall, most exposures stemmed from first-party apps and more than two in three exposures in third-party apps had no known CVE.
Sam Rubin, Senior Vice President of Unit 42 at Palo Alto Networks said, "AI has created an asymmetric advantage for threat actors against organizations trying to defend at human speed. Modern cybersecurity requires machine-speed defense. We’re combining Unit 42’s offensive testing and threat intelligence expertise with industry-leading AI harnesses and exclusive access to gated capability models to give defenders back the upper hand."
Availability
Continuous Frontier AI Defense is available worldwide on an annual subscription with options that vary based on the specific OpenAI, Anthropic and open-source models that are used. All subscriptions leverage a multi-model harness to match the optimal AI model to each security task.
