In a new byline for Cybersecurity Insiders, Dan DeCloss, founder of PlexTrac by Brinqa, looks at what happens after AI finds and fixes a vulnerability. AI tools can now write patches and open pull requests faster than any security team, and moving tickets to “resolved” feels like progress. Drawing on his years in pen testing, Dan points out that a closed ticket only confirms a change was made. Whether that change removed the exposure is a separate question most programs never go back to answer.
He sets out what CISOs should measure once a ticket closes. Retest fixes on a schedule and the way an attacker would, track recurrence on the same assets, check whether overall exposure is declining, and keep a human accountable for every outcome with a record tied to the original finding. His advice is to put some of the time AI hands back into validation.