BreachRx launches Rex Platform to coordinate AI-era incident response

Incident response company BreachRx Inc. today launched the Rex Platform, an agentic artificial intelligence incident command center built for a future in which AI-accelerated attacks set off several breaches at once.

The platform grows out of Rex AI, the generative AI engine BreachRx put out in March. What was an assistant is now pitched as the place a whole response team works. The argument behind it is blunt. Planning for one big breach at a time, the company says, no longer matches what its customers face.

Cheaper attacks are part of why. BreachRx says AI tooling lets less experienced actors build the kind of complex, multistep attacks that used to require real skill, which means more of them and more at the same time.

The company points to the Cloud Security Alliance’s “AI Vulnerability Storm” report, which warns AI can now find and exploit weaknesses faster than people can react, shrinking the time between exposure and a live attack to hours, to back up its claim.

Most enterprises still run incidents through a patchwork of tools, BreachRx co-founder and Chief Executive Anderson Lunsford said, and that fragmentation causes breakdowns in ownership and delayed decisions at the moment clarity matters most. As breaches pile up at the same time, he added, getting through one depends on “how the entire business responds under pressure,” from security and legal to communications and executive leadership.

Running the platform is an orchestration agent called Maestro. It tracks what is happening in an incident and hands work to a roster of narrower agents. One sizes up severity and which assets are hit. Another pushes the actual response forward and keeps playbooks moving.

A regulatory agent works out which disclosure rules apply in which jurisdiction, while a reporting agent drafts the executive summaries and situation reports that normally eat an analyst’s night. Others read through documents or run tabletop exercises.

A key selling point is that Rex runs out-of-band, separate from the systems an attacker may have already reached. That lets teams keep coordinating when the corporate network is compromised or frozen for investigation. The platform also captures evidence as the incident unfolds and tracks regulatory obligations in the background.

BreachRx is making a second bet too. As companies wire AI agents into their own operations, it expects a wave of incidents that start with the AI itself rather than an outside attacker, things like over-permissioned agents leaking data or models that can be manipulated. Those carry the same legal exposure and tight clocks as a breach, the company says, and Rex is meant to handle both.

Founded in 2017, BreachRx raised a $15 million Series A in May 2025 led by Ballistic Ventures and counts more than 100 customers, among them Coinbase Global Inc., American Express Co. and Commvault Systems Inc.

“Companies plan for one major incident at a time. That assumption is already broken,” said Phil Venables, a partner at Ballistic Ventures and a former Fortune 500 chief information security officer. The harder problem now, he added, is running several overlapping incidents at once without losing control of the business, which he said takes a different operating model than most companies have.

The Rex Platform is available now.

Image: BreachRX