‘Our partners have been telling us that they don’t just want more data; they want a way to turn that data into meaningful conversations and measurable outcomes for their customers,’ says Cynomi CEO David Primor. ‘They want to connect vulnerability findings to business risk, compliance requirements and remediation priorities instead of jumping between multiple tools and spreadsheets. That’s exactly what we’ve built.’
Cynomi’s largest platform expansion is a direct response to demand from MSPs for a way to transform vulnerability data into remediation plans, compliance workflows and better customer conversations, according to co-founder and CEO David Primor.
The release, pushed out last week, delivers new integration, automation and AI capabilities that bring together security findings, governance and compliance into a single platform.
Primor said the new release directly addresses the requests that the Israel-based vendor has heard most often from partners.
MSPs are facing an uptick in operational challenges, spending between three and eight hours per client every week manually running vulnerability scans, importing reports, updating remediation plans and collecting compliance documentation, according to Primor.
[Related: Cynomi Exec On The Value vCISOs Can Bring To MSPs]
“Our partners have been telling us that they don’t just want more data; they want a way to turn that data into meaningful conversations and measurable outcomes for their customers,” he told CRN. “They want to connect vulnerability findings to business risk, compliance requirements and remediation priorities instead of jumping between multiple tools and spreadsheets. That’s exactly what we’ve built. We’re giving MSPs one place where they can see the complete security posture, understand what matters most and communicate that clearly to their customers.”
The release also brings seven new vulnerability management integrations, including with Tenable, Rapid7 InsightVM, CrowdStrike Falcon Spotlight, SentinelOne Singularity Vulnerability Management, Tanium Exposure Management, Upwind and Qualys as well as automated scheduled scanning, a centralized Files Repository and expanded AI Coworker functionality.
Altogether, the platform creates a continuous security governance workflow, connecting vulnerability findings, remediation planning, compliance evidence and AI-assisted execution into a single platform.
But at the center of the release is Cynomi’s CISO Intelligence infrastructure, which powers its AI Findings Coworker. The AI analyzes incoming vulnerability data, identifies conflicting findings, prioritizes risks, and recommends remediation updates that partners can review before implementation.
“When an MSP is managing five customers, some manual processes are manageable,” the CEO said. “But when that same provider grows to 30 or even 50 customers, those processes simply don’t scale. Building remediation road maps, reviewing hundreds of findings, prioritizing actions and preparing customer reports can consume an enormous amount of time. AI allows us to remove those repetitive administrative tasks so providers can focus on delivering strategic guidance. The human remains in control, but the platform helps them get there much faster.”
He added that he believes the market is shifting toward continuous security governance rather than periodic security assessments.
“We’re seeing more regulations, more cyber insurance requirements and more customers asking for proof that they’re maintaining security continuously … not just checking a box once a year,” he said. “Whether it’s CMMC [Cybersecurity Maturity Model Certification] in the United States or new regulations emerging across Europe, organizations need to demonstrate ongoing compliance. That creates a tremendous opportunity for MSPs to move beyond simply managing security tools and become trusted security advisers who provide continuous governance.”
Cynomi partners said the latest capabilities are helping them move beyond identifying vulnerabilities to managing continuous security programs.
Phil Bindley, field CISO at Birmingham, U.K.-based Intercity, said the platform’s biggest advantage is its ability to connect security findings with remediation and proof of improvement.
“What makes Cynomi powerful is that it doesn’t stop at identifying risk,” he said. “It connects every finding to the actions we can take to resolve it and gives us the evidence to show customers exactly how their security posture is improving.”
John Snyder, CEO of Durham, N.C.-based Net Friends, said the platform also simplifies ongoing security management and customer reporting.
“Cynomi turns cybersecurity from a collection of spreadsheets into a living program,” he said. “We can see where customers stand, prioritize what to fix next and generate executive reporting that proves the progress we’re making every step of the way.”
The release also marks a broader strategic shift for Cynomi as it expands beyond vulnerability management to become what Primor described as an “operating system” for MSPs.
“This is the biggest release we’ve ever delivered, but I fully expect we’ll break that record again,” he said. “We’re listening very closely to what our partners need, and AI is allowing us to innovate much faster than ever before.”
