Cork Cyber has added automated patching and vulnerability management to its platform, completing what it describes as its AI remediation loop.
It has also expanded its Model Context Protocol server, allowing managed service providers to query live cyber data from the AI tools they already use.
The update continues Cork's two-year shift from cyber warranties to a broader platform for risk detection, remediation, and financial protection for MSPs serving small and medium-sized businesses.
The platform now spans 115 integrations across 11 categories. The new release enables identification and remediation across more than 13,000 software titles through Chocolatey and Winget within the remote monitoring and management systems partners already use, without requiring a new agent or console.
According to Cork, manual patching and software vulnerability remediation remain a significant labour cost for managed service providers. It cited industry casework indicating that the task can consume more than 60 technician hours a month for every 1,000 endpoints under management.
Most remote monitoring and management tools patch operating systems and widely used applications natively, but cover only a limited number of titles, Cork said. The broader software estate used by clients creates additional security gaps that often still require manual intervention from technicians.
Cork said 77% of eligible security tickets within its remote monitoring and management workflows now close before any human intervention. Each automated fix returns about $2.50 in technician labour, it added.
Dan Candee, Chief Executive Officer of Cork Cyber, framed the update as part of a broader effort to combine cyber protection with financial backing.
"Insurance prices risk, but it cannot change it. Security changes risk, but it cannot price it," said Dan Candee, Chief Executive Officer of Cork Cyber. "Cork does both, on the same telemetry, with capital behind the outcome. And we do it every day instead of once a year. We spot the gap, close it through the tools the business already runs, and pay if something gets through. That is the whole company in three sentences."
Labour pressure
Cork argues that patching and vulnerability remediation are among the largest hidden operating costs in managed services. By automating the work within existing management tools, it aims to reduce the time technicians spend on repetitive security tasks while keeping workflows inside systems MSPs already use.
The same approach underpins the MCP server expansion. Rather than requiring partners to use another dashboard, Cork said MSPs can query risk intelligence from any MCP-capable AI tool they already use, covering data from detection through remediation and financial outcome.
Cork said this reduces switching between consoles and gives technicians direct access to operational data in their existing working environment. The release follows Cork's earlier Auto Mapping launch, which it described as the layer needed to turn cyber risk visibility into action at scale.
"Cork secures not just the doors and windows, but also the dryer vent and doggy door. We see them across every building a partner manages, and closes and locks them automatically," said Candee. "Instead of handing a technician a list of 30 things to investigate on an endpoint, we handle 28 and hand back two. That is a far better use of highly skilled people. Time, security, and money, in that order. That is what we return, along with the peace of mind that the loop is running while everyone sleeps."
Platform shift
Cork's latest release reflects a broader push among cyber suppliers to embed automation into the software service providers already use, rather than asking them to adopt standalone interfaces. In Cork's case, the remote monitoring and management system remains the source of truth, while the company layers on analysis, remediation, and financial coverage.
Marcus Recck, Head of Product and Engineering at Cork Cyber, said the latest additions build directly on the mapping work introduced earlier.
"Mapping was the foundation, and we said so in April," said Marcus Recck, Head of Product and Engineering at Cork Cyber. "Everything since, software deployment automation, automated patching, vulnerability management, are what that foundation was for. By combining the lenses of the individual tools in a partner's stack, Cork extrapolates risk signals no single product can see and now acts on them. Partners have already spent the money building their stack, and our job is to make that stack smarter, not tell them to rip it out. The loop from detecting a gap to closing it runs without a human in it for most tickets, and the MCP server means partners can interrogate every step of it from whatever tool they already work in."
"The dashboard era is over. An MSP's day lives in its PSA and its AI tool of choice, and no dashboard we could design would be perfect for a thousand different businesses," said Candee. "We bring the data to the work. Ask a question in the tool you already run, get your own live risk intelligence, act on it. More agency, in their hands, for less money. The best version of Cork is invisible until the moment you need it."