Cork Cyber adds AI patching and vulnerability management to MSP platform

Cork Cyber said it completed its AI remediation loop on Sept. 25, adding automated patching and vulnerability management to its MSP platform and expanding its MCP server for live cyber-data queries from AI tools. The company says the update closes 77% of eligible security tickets before a human touches them and returns technician time and labor to partners.

Why it matters: - Cork Cyber is trying to move MSP security work from detection to automatic cleanup, which can reduce manual labor and speed up response. - The company says the new workflow returns technician hours and lowers the hidden cost of patching across customer environments. - Cork also ties remediation to financial protection, giving partners both operational and capital-backed outcome coverage on the same telemetry.

What happened: - Cork Cyber announced the completion of its AI remediation loop on Sept. 25. - The release adds automated patching and vulnerability management to Cork's platform. - Cork now spans 115 integrations across 11 categories. - Cork expanded its Model Context Protocol server so partners can query live cyber data from AI tools they already use. - The company described the announcement as the final leg of a two-year transformation from cyber warranty provider to broader cyber risk platform.

The details: - Cork said its automation covers identification and remediation across more than 13,000 software titles. - The workflow runs through Chocolatey and Winget inside the RMM a partner already uses. - The system does not require a new agent or a new console. - Cork said 77% of eligible security tickets now close before a human touches them. - The company said each automated fix returns about $2.50 of technician labor. - Cork said full automation can return more than 60 technician hours a month for every 1,000 endpoints under management. - The company said those recovered hours are visible on the partner dashboard. - The platform's RMM-based flow now includes Automated Asset Analysis, Auto Mapping, Software Deployment Automation, automated patching, and vulnerability management. - The expanded MCP server lets partners query live cyber data from any MCP-capable AI tool. - Cork said the RMM remains the source of truth for the platform. - The company said the same telemetry drives detection, remediation, and financial protection. - Cork said its approach works across the software clients install beyond the small set of titles most RMMs patch natively. - The company said most RMMs patch only operating systems and a limited set of popular applications such as browsers and PDF readers.

Between the lines: - Cork is betting that MSPs want security automation inside existing workflows, not another standalone dashboard. - The MCP expansion suggests the company sees AI assistants as the next control surface for technicians, not just reporting tools. - The pitch combines operational savings with risk transfer, which could help Cork stand out in a crowded MSP tooling market. - Cork is also positioning its stack as a way to surface risk that no single product can see on its own.

What's next: - Cork said the automation loop will keep running continuously across partner environments. - The company plans for technicians to use the expanded MCP access to ask questions and act on live risk data from the AI tools they already work in. - Cork's next phase appears focused on making the remediation system more invisible to users while increasing partner control over outcomes.

The bottom line: - Cork Cyber is pushing MSP security toward autonomous remediation, with the company claiming most eligible fixes now close before a human gets involved.