About BreachRx
BreachRx sells the Rex Platform, which sits above a customer's detection and remediation stack to run the entire business response after a breach through AI-Accelerated Cyber Incident Response Management (CIRM). BreachRx describes itself as the pioneer of Cybersecurity Incident Response Management (CIRM), helping organizations manage cyber incidents as the enterprise-wide risk events they are. BreachRx says incident response, at its most critical moment, is still managed through meetings, messages and disconnected tools that were never designed for an enterprise-wide crisis. BreachRx says modern cyber incidents require cross-functional coordination, speed and documented consistency, which manual processes cannot deliver. BreachRx names SEC, CIRCIA, NYDFS and global mandates, some with one-hour clocks. BreachRx says boards and executives now need a record of who knew what, and when.[1][2][3]
The Rex Platform provides a single, out-of-band system for enterprise incident response. The Rex Platform operationalizes incident plans, guides teams through changing conditions and maintains response communications in real time. Rex brings the response together in one shared command center, with clear ownership and a single incident record. Role-based workflows give each participant the right context, tasks, deadlines and decision points. BreachRx says teams can keep every function working from one authoritative incident record as facts change. BreachRx says the platform captures actions and decisions as they happen and maintains a contemporaneous record from escalation through resolution. BreachRx also describes keeping sensitive legal collaboration protected inside the response environment.[4]
Rex AI Maestro coordinates specialized agents that execute tasks, update documentation and support regulatory work as an incident unfolds. Rex AI Maestro is the primary coordinator agent that interprets intent, maintains context and selects specialty agents. Rex uses agentic AI and workflow automation to help teams handle more incidents without scaling human effort at the same rate. Rex AI agents execute repeatable response work across the platform, and people make the consequential decisions.[4]
Out-of-Band Comms gives an enterprise a trusted communications environment when corporate systems are unavailable, compromised or cannot be trusted. BreachRx says ransomware, identity takeover and business email compromise can disrupt the email, chat and conferencing a team uses to run the response. Mail, chat, meetings, Scratch Pad and Mobile Command stay tied to the active incident. The out-of-band environment includes secure video and audio meetings for live incident coordination, with support for privileged meetings, recording and transcription. Secure mobile access lets executives see live incident status, what changed and decision-ready context. Protected workstreams separate sensitive legal discussions from routine operational coordination, while role-based access gives counsel the context they need without exposing the entire incident.[4][5]
Cyber RegScout maps the incident to 200+ global regulations, and disclosure and escalation deadlines surface in real time. Cyber RegScout can help organizations identify applicable rules, understand notification paths and keep analysis current as facts change. AI Tabletops on Demand help teams exercise more often, retest fixes and carry what they learn into live response workflows. Rex AI builds the scenario and produces the after-action report, inside the same governed environment used for live response.[4][6]
Rex connects to communication, identity, security operations, notification, automation and ticketing tools. The workflow Rex fits into begins with alerts and findings from XDR, SIEM, SOAR and the rest of the security stack. Rex opens the case, assigns owners and starts the right playbook automatically. Legal, privacy, communications and executives are brought in with role-based tasks. Regulatory, customer and partner notifications are tracked against every deadline. BreachRx says it documents every decision and action automatically, creating an audit-ready record.[4][7]
Andy Lunsford is CEO and Co-Founder of BreachRx, and has over 15 years of experience in privacy law and commercial litigation. Matt Hartley is Co-Founder and Chief Product Officer of BreachRx. BreachRx says its platform and solution are backed with contractual financial protection. BreachRx says it helps organizations operationalize cybersecurity compliance by connecting planning, response workflows, documentation and reporting in one place.[2][3][4][7][8]
BreachRx on the record