Cork resolves 77% of qualifying security tickets without human intervention, recovers dozens of technician hours monthly for partners, and backs its work with financial guarantees.
“The era of dashboards is finished. We deliver data directly into the workflow, giving MSPs confidence and reclaiming their time.”— Dan Candee, CEO of Cork Cyber
Cork Cyber, a cyber risk intelligence, remediation, and financial resilience platform purpose-built for MSPs, has unveiled the final piece of its AI remediation cycle. This update adds automated patching and vulnerability management to a system that now integrates with 115 tools across 11 categories. Additionally, Cork has broadened its Model Context Protocol (MCP) server, enabling partners to access their live cybersecurity data using any AI tool they prefer. This launch concludes a two-year overhaul. Originally a cyber warranty provider, Cork reimagined its mission around a more fundamental question: whether an SMB is truly secure from the start.
“Insurance can price risk but cannot alter it. Security can alter risk but cannot price it,” stated Dan Candee, CEO of Cork Cyber. “Cork accomplishes both, using identical telemetry, with financial backing behind the result. And we operate daily rather than annually. We identify the vulnerability, fix it through the tools a business already uses, and provide compensation if something slips through. That sums up our entire company in three sentences.”
Also worth a look: SecEdge Launches AI-PASSPORT™ to Combat the Growing Threat of Backdoored AI Models and Jewelers of America and JA New York to Host Joint Networking Event Celebrating Their Longstanding Relationship.
The cost and the clock
Manual patching and software vulnerability fixes represent one of the biggest hidden expenses in managed services. Industry data shows this consumes over 60 technician hours each month for every 1,000 managed endpoints. Nearly half the time, a full-time technician is solely occupied with hunting down security weaknesses. Most RMMs handle patches for operating systems and widely used applications—browsers, PDF readers—covering anywhere from a few dozen to a few hundred programs. The software clients install goes well beyond that list, and the vulnerabilities it introduces are often already visible within existing tools. What those gaps demand, however, is manual effort to fix. That labor is what Cork automates: identifying and resolving issues across more than 13,000 software titles, using Chocolatey and Winget, within the RMM the partner already operates, without needing new agents or consoles.
Within these RMM-based processes, 77% of qualifying security tickets are now closed before a person ever gets involved. Each automated resolution saves roughly $2.50 in technician labor, and these fixes run around the clock.
“Cork doesn’t just lock the front door and windows—it also secures the dryer vent and the doggy door. We spot them in every building a partner oversees, and we automatically close and lock them,” said Candee. “Rather than giving a technician a list of 30 items to check on a single endpoint, we handle 28 and pass back two. That’s a much smarter use of skilled professionals. Time, security, and money—in that sequence. That’s what we restore, along with the confidence that the process keeps running while everyone is asleep.”
In April, Cork introduced its Auto Mapping feature, describing it as the automation layer needed to transform cyber risk visibility into scalable action. Today’s release represents that action. Automated Asset Analysis, Auto Mapping, Software Deployment Automation, and now automated patching and vulnerability management complete the cycle from detection to remediation within the RMM a partner already owns.
Cork’s open MCP server, enhanced in this release, extends that approach to the data itself. Instead of requiring partners to adopt another dashboard, Cork makes its risk intelligence accessible through any MCP-compatible AI tool a partner already uses—spanning detection, remediation, and financial outcomes. For technicians, this means fewer switches between systems and more direct access to their own information, within the tool they already work in.
“The dashboard era is over. An MSP’s daily workflow lives in its PSA and its chosen AI tool, and no dashboard we could build would fit a thousand different businesses perfectly,” said Candee. “We bring the data to where the work happens. Ask a question in the tool you already run, get your own live risk intelligence, and act on it. More control, in their hands, at a lower cost. The best version of Cork is invisible until the moment you need it.”
“Mapping was the groundwork, and we made that clear in April,” said Marcus Recck, Head of Product and Engineering at Cork Cyber. “Everything since—software deployment automation, automated patching, vulnerability management—is what that foundation was built for. By combining the perspectives of the individual tools in a partner’s stack, Cork identifies risk signals no single product can detect and now takes action on them. Partners have already invested in building their stack, and our role is to make that stack more intelligent, not to tell them to replace it. The loop from finding a vulnerability to fixing it runs without human involvement for most tickets, and the MCP server allows partners to examine every step from whatever tool they already use.”
This strategy is gaining recognition beyond its partner network. Candee was named to Channel Insider’s 2026 AI 50, alongside executives from Microsoft AI, AWS, OpenAI, Palo Alto Networks, and Cisco. Cork Cyber was also named Pax8 Startup Vendor of the Year for 2026—an honor Cork credits to its underlying philosophy rather than the reverse.
Key features announced today include:
• Automated patching and vulnerability management, finalizing the AI remediation loop from detection through resolution
• Patch support for more than 13,000 software titles via Chocolatey and Winget, compared to the few dozen or few hundred titles most RMMs cover natively
• 77% of qualifying security tickets resolved before human intervention
• More than 60 technician hours reclaimed each month per 1,000 managed endpoints at full automation, with recovered hours displayed on the partner dashboard
• Approximately $2.50 in technician labor saved per automated fix
• 115 integrations across 11 categories, with the RMM serving as the authoritative source
• Expanded MCP server access, enabling partners to query live cyber data from any MCP-compatible AI tool
• Financially backed outcomes based on the same telemetry driving detection and remediation
About Cork Cyber
Cork Cyber is a cyber risk intelligence, remediation, and financial resilience platform engineered for MSPs. Cork integrates with 115 tools across 11 categories, using the RMM as its source of truth. Cork verifies that protection is genuinely active across every client environment, resolves the majority of qualifying security tickets through automated remediation before human involvement, returns the recovered hours to its partners, and backs the outcome with financial protection. For additional information, visit https://corkinc.com/.
Daniel Delson
Magnitude, Inc.
daniel@magnitude-growth.com
Visit us on social media:
LinkedIn
YouTube
