Xage expands Critical Asset Protection with AI-era Zero Trust controls

Xage Security announced an expansion of its Critical Asset Protection, extending identity-based Zero Trust coverage from industrial systems to modern digital assets, including cloud services and AI systems. The release says threat actors using AI can discover and exploit software vulnerabilities faster than human teams can patch. It cites Microsoft reporting that known-vulnerability exploits are being incorporated faster than before, and the 2026 Verizon DBIR finding organizations face 50% more critical vulnerabilities to patch on average than the prior year. Xage argues patching and detection alone are too slow for AI-accelerated attacks. Instead, it focuses on reducing exposure pre-exploit by hiding assets from reconnaissance and vulnerability scanning, brokering every interaction, and enforcing least-privilege policies. New “Critical Asset Protection” capabilities emphasize identity-based microsegmentation and just-in-time controls that can be applied to dynamic, ephemeral workloads without costly architectural redesigns. The company claims organizations can: - Hide assets from unauthorized discovery and scanning - Broker access so human and non-human identities don’t connect directly - Verify identities and apply least privilege before and during access - Restrict communications and lateral movement to approved actors, actions, and paths CEO Duncan Greatwood said cybersecurity will shift toward “controlling exposure,” so vulnerabilities don’t automatically become paths to compromise. Xage also highlights protecting AI systems from “AI-on-AI violence,” where an attacker’s AI could accelerate compromises of legitimate AI. Overall, the news is a product-focused Zero Trust update rather than a crypto protocol change, with implications mainly for enterprise security spending and vendor sentiment.