Cyolo has revealed Live Risk Detection, a first-of-its-kind AI capability that sets a new standard for remote session supervision.
Live Risk Detection brings real-time, context-aware detection and response to active OT sessions by identifying cyber-threats, operational risks and unexpected behavior as they occur.
When potential risk is detected, Live Risk Detection alerts teams within seconds, enabling them to investigate and respond while the session is still active and before operations are impacted.
Remote connectivity
As remote connectivity continues to expand, employees, vendors and OEMs are performing more critical OT work remotely.
At the same time, AI-enabled threats are increasing the speed and effectiveness of malicious activity.
But 1:1 monitoring of every session is not practical at scale, meaning potentially risky sessions may go unsupervised.
Cyolo highlighted that Live Risk Detection removes this bottleneck by adding AI supervision to every session and directing human attention to activity that may require intervention.
In contrast to approaches that evaluate individual actions against predefined allow or block criteria, Live Risk Detection uses context-aware AI to assess activity across the full session.
It identifies activity that is inherently malicious or unsafe, as well as mistakes that could lead to downtime or other operational disruptions.
The company added that it can also recognise when a sequence of individually legitimate actions may indicate that an attack is underway or, conversely, when activity that may appear risky in isolation is benign in the context of the session.
Crucially, Live Risk Detection never acts autonomously.
It flags potential risk and alerts relevant teams, always keeping a human in the loop to decide whether to observe, join or terminate the session.
This human-controlled approach is essential in OT and critical infrastructure environments, where digital actions can have physical consequences.
“Without taking the control away”
Almog Apirion, CEO and Co-Founder of Cyolo commented: “Zero Trust doesn’t end at login.
“Getting the right person connected to the right system is key, but that’s just the beginning of the story.
“Risk can emerge even after a session is underway.
“Live Risk Detection gives teams another set of eyes, helping them spot risk while there’s still time to intervene—and without taking control away from the people who know the environment best,” Apirion concluded.
Live Risk Detection
According to the company, Live Risk Detection helps security and operations teams:
- Identify cyber and operational risk: Detect malicious activity as well as mistakes, unsafe actions or configuration changes that could disrupt equipment, processes, or production, including during third-party vendor sessions
- Understand risk in context: Assess activity across the broader session, including user intent, to identify when otherwise legitimate actions combine to create risk and help contain AI-enabled threats faster
- Respond while the session is active: Alert the right security and operations stakeholders in real time so they can assess the situation and, if necessary, intervene or terminate the session before risk escalates
- Scale session oversight: Reduce the bottleneck of 1:1 manual monitoring by directing attention to the sessions and activities most likely to require review
- Keep humans in control: Use AI to flag potential risk and provide context without taking autonomous action, leaving response decisions to human experts