What happened
On Oct 20 Mondoo announced Agentic Remediation, expanding its AI-native exposure management platform: code inspection and remediation (deterministic/AI-assisted fixes delivered as GitHub PRs, in IDE and via coding agents), external attack surface scanning, expanded CIS Benchmark remediations, and automated fix deployment through Microsoft Intune and CrowdStrike Falcon with post-fix verification. Teams set per-asset automation appetite (autonomous vs human-in-the-loop), and customer agents can drive it via MCP.
Why it matters
It moves exposure management from 'find and report' to closed-loop fix-and-verify, and notably lets policy decide which fixes run autonomously. Delivering remediation through existing Intune/Falcon tooling lowers adoption cost, and the MCP surface lets other agents request fixes.
Applicability
Exposure-management/VM and devsecops teams evaluating agentic remediation; verify the Intune/Falcon fix-delivery coverage and the autonomy controls before enabling autonomous fixes on production endpoints.