# Cogent Security Makes Fortune Cyber 60 Again, Citing PHP2Shell Response Gap > Cogent Security was named to Fortune's Cyber 60 for a second year, as its research found Fortune 500 firms patched under 1% of assets hit by PHP2Shell. - Published: 2026-11-03T05:54:09+00:00 - Section: Business - Author: News Desk - URL: https://newsforagent.com/news/2026-11-03/cogent-security-fortune-cyber-60-second-year - Source: [GlobeNewswire](https://www.globenewswire.com/news-release/2026/11/03/3393879/0/en/cogent-security-makes-the-fortune-cyber-60-for-a-second-year-with-a-plan-to-run-cyber-defense-like-a-factory.html) ## Key takeaways - Cogent Security was named to Fortune's Cyber 60 for the second consecutive year. - Cogent's research found the average Fortune 500 company had patched fewer than 1% of its 2,266 PHP2Shell-affected assets by 5 p.m. Pacific on the disclosure day. - Cogent's Zero Day Response mapped vulnerable assets across customer environments in an average of five minutes. [Cogent Security](https://akta.pro/company-profiles/0000m9x/cogent-security) was named to Fortune's Cyber 60 for the second consecutive year, the company said on November 3, citing the PHP2Shell vulnerability as evidence of a gap in enterprise response. The list, developed by Fortune with Lightspeed Venture Partners and AWS, recognizes 60 venture-backed cybersecurity startups that have yet to go public, be acquired, or reach another significant exit. [GlobeNewswire](https://www.globenewswire.com/news-release/2026/11/03/3393879/0/en/cogent-security-makes-the-fortune-cyber-60-for-a-second-year-with-a-plan-to-run-cyber-defense-like-a-factory.html) carried the announcement. ## How Cogent Security Described the PHP2Shell Gap PHP2Shell, disclosed on October 21, involved two critical flaws that had remained in PHP for more than a decade. AI-assisted research helped identify the vulnerabilities and develop working exploits in approximately one week, with attacks beginning before a patch was available, and Cloudflare recorded millions of exploitation attempts that day. According to Cogent's research, by 5 p.m. Pacific the average Fortune 500 company had patched fewer than 1% of its 2,266 affected assets. Cogent sells an enterprise platform for autonomous cyber defense, and its first product applies its Cyber Defense Factory model to vulnerability management. Agents build a deduplicated record of assets across cloud, on-premises and endpoint environments, match newly published vulnerabilities against that inventory, and carry out supported fixes inside autonomy zones each customer defines. Changes outside those zones go to a single owner as a ticket for approval, and Cogent closes the work only after the next scan confirms the fix held. "Attackers already run like a factory. AI is finding the bugs and writing the exploits, and in some cases it's running most of the attack," said Vineet Edupuganti, Cogent's co-founder and CEO. "Most enterprises are still defending by hand, one ticket and one handoff at a time." ## Cogent Security's Funding and Customer Record Cogent has raised $53 million in total funding, according to akta.pro [company records](https://akta.pro/company-data), including an $11 million seed round in July 2025 led by Greylock and a $42 million Series A in February 2026 led by Bain Capital Ventures. The same records list dozens of Fortune 1000 companies among its collaborations since its July 2025 launch, and a 97% reduction in exposure window for critical vulnerabilities reported by customers. The company was founded in 2024 and is headquartered in San Francisco. ## Cogent Security's Earlier VR-1 Launch Cogent launched VR-1, a frontier reasoning model designed to investigate enterprise environments and prove whether multi-step attack paths are reachable by adversaries, Security Boulevard reported in August 2026. SiliconANGLE reported in July 2026 that the model was built to identify and prove attack paths in live enterprise environments. Cogent describes VR-1 as its domain-specific model, which it says has topped cybersecurity benchmarks. ## What Cogent Security Says Comes Next Cogent says its Zero Day Response processed the PHP2Shell advisory and mapped vulnerable assets across customer environments in an average of five minutes, days before scanner signatures were available. Applied to the average Fortune 500 environment in its research, the analysis cut 2,266 affected assets to 16 that had PHP loaded at runtime, faced the internet, and supported critical business functions. Edupuganti said security teams are moving into the role of setting policy while agents do the work at machine speed. ## Companies in this story - [Cogent Security company profile](https://akta.pro/company-profiles/0000m9x/cogent-security) · website: https://www.cogent.com --- News for Agent · https://newsforagent.com/llms.txt