BreachRx launches Rex Platform to coordinate AI-era incident response

Incident response company BreachRx Inc. today launched the Rex Platform, an agentic artificial intelligence incident command center built for a future through which AI-accelerated attacks set off several breaches directly.

The platform grows out of Rex AI, the generative AI engine BreachRx put out in March. What was an assistant is now pitched because the place a complete response team works. The argument behind it’s blunt. Planning for one big breach at a time, the corporate says, now not matches what its customers face.

Cheaper attacks are a part of why. BreachRx says AI tooling lets less experienced actors construct the type of complex, multistep attacks that used to require real skill, which suggests more of them and more at the identical time.

The corporate points to the Cloud Security Alliance’s “AI Vulnerability Storm” report, which warns AI can now find and exploit weaknesses faster than people can react, shrinking the time between exposure and a live attack to hours, to back up its claim.

Most enterprises still run incidents through a patchwork of tools, BreachRx co-founder and Chief Executive Anderson Lunsford said, and that fragmentation causes breakdowns in ownership and delayed decisions in the meanwhile clarity matters most. As breaches pile up at the identical time, he added, getting through one will depend on “how all the business responds under pressure,” from security and legal to communications and executive leadership.

Running the platform is an orchestration agent called Maestro. It tracks what is going on in an incident and hands work to a roster of narrower agents. One sizes up severity and which assets are hit. One other pushes the actual response forward and keeps playbooks moving.

A regulatory agent works out which disclosure rules apply through which jurisdiction, while a reporting agent drafts the manager summaries and situation reports that normally eat an analyst’s night. Others read through documents or run tabletop exercises.

A key selling point is that Rex runs out-of-band, separate from the systems an attacker can have already reached. That lets teams keep coordinating when the company network is compromised or frozen for investigation. The platform also captures evidence because the incident unfolds and tracks regulatory obligations within the background.

BreachRx is making a second bet too. As corporations wire AI agents into their very own operations, it expects a wave of incidents that start with the AI itself quite than an out of doors attacker, things like over-permissioned agents leaking data or models that might be manipulated. Those carry the identical legal exposure and tight clocks as a breach, the corporate says, and Rex is supposed to handle each.

Founded in 2017, BreachRx raised a $15 million Series A in May 2025 led by Ballistic Ventures and counts greater than 100 customers, amongst them Coinbase Global Inc., American Express Co. and Commvault Systems Inc.

“Corporations plan for one major incident at a time. That assumption is already broken,” said Phil Venables, a partner at Ballistic Ventures and a former Fortune 500 chief information security officer. The harder problem now, he added, is running several overlapping incidents directly without losing control of the business, which he said takes a special operating model than most corporations have.

The Rex Platform is on the market now.

Image: BreachRX