Feature Release: Introducing the Mitigant MCP Server

We are excited to release the Mitigant MCP server, bringing agentic adversary emulation to organizations. Security teams can now use AI agents, e.g., Claude Code and Kiro, to execute & manage the complete attack lifecycle: planning, safe execution

MITRE ATT&CK v20: New AI Techniques & Why You Should Care

October 27, 2026

A technical deep dive into two new MITRE ATT&CK AI techniques, including attack scenarios and detection strategies

Cloud Security

Effective Red Teaming in the Agentic Era: Amazon Bedrock (Part II)

October 8, 2026

The AI attack surface spans beyond models; other components are similarly important and must be secured. This second part of the Bedrock Red Teaming blog series provides further practical guidance on means to continuously test Bedrock components.

Cloud Security

AgentCore or AgentSore: Cross-Agent Privilege Escalation in Bedrock AgentCore

June 22, 2026

Bedrock AgentCore starter toolkit ships an overly permissive IAM role that attackers exploit to compromise critical AgentCore components. This article discusses practical exploitation of these weaknesses, detection opportunities & countermeasures.

Cloud Security

Effective Red Teaming in the Agentic Era: Amazon Bedrock (Part I)

May 17, 2026

AI Red Teaming plays a central role in AI quality of service, ensuring end users are not harmed or frustrated by malicious output. This article provides practical AI Red Teaming guidance for Amazon Bedrock.

Feature Release

Feature Release: Cloud Penetration Testing with Prowler and Wiz Integrations

April 10, 2026

Mitigant Cloud Pentests now integrate with Prowler and Wiz, enabling seamless validation of CSPM findings through real, safe attack execution that surfaces SCP-aware privilege-escalation paths, fully visualized and mapped to compliance benchmarks.

Cloud Security

Mitigant Threat Catalog: 61 Techniques & 12 AWS Services Added

March 18, 2026

Mitigant Threat Catalog massive update! We added 61 techniques & 12 AWS services, totalling 91 techniques across 32 AWS services. The catalog now includes techniques across 11 MITRE ATT&CK tactics.

Cloud Security

Introducing the Mitigant Threat Catalog: From Static Descriptions to Dynamic Executions

February 13, 2026

We are launching (1) Mitigant Threat Catalog, a free, interactive resource that transforms MITRE ATT&CK cloud techniques into executable CLI commands, (2) The Cloud Attack Language, a format for effectively constructing complex, multi-step attacks.

Cloud Security

The Best of Mitigant Blog Articles in 2025

January 8, 2026

This article highlights our top blog articles in 2025, from AI security to Cloud Attack Emulation, including research referenced in Splunk's Security Analytics Story and pioneering Adversarial Exposure Validation.

Cloud Security

CSPM Scans Are Not Cloud Penetration Tests: Understanding the Critical Differences

December 10, 2025

This blog addresses the misconception that CSPM scans are equivalent to cloud penetration tests. Understanding the critical differences between configuration auditing and security validation is essential for a robust cloud security posture.

Illustration of two overlapping documents with horizontal lines and a magnifying glass highlighting the text area.

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

Expose Threats with AI-Powered Adversary Emulation

Safely run controlled cloud attacks and validate your real defensive capabilities in minutes. No credit card required.

Get Demo Environment

Start 30-day Free Trial