Positive Technologies has added a unified console to its PT X platform, allowing customers to manage incidents and assets from a single interface. The new capability eliminates the need to switch between separate windows, reports, and host lists when tracking attacks, controlling response actions, and evaluating infrastructure security.
The service continuously displays attempted attacks, their potential causes, and the current status of incident handling. Events are automatically ranked by priority so that specialists can immediately focus on cases requiring their involvement while PT X handles routine matters independently.
Customers can predefine the assets on which Positive Technologies is permitted to perform response actions. For each node, an owner can be assigned and one of three response scenarios selected: the customer’s own team blocks attacker activity, PT X acts automatically, or the platform requests explicit approval before proceeding. Upon completion, the system generates a detailed report listing who performed each action and when.
A separate dashboard shows monitoring coverage completeness. Hosts protected by MaxPatrol EDR are clearly marked, while unprotected assets are highlighted as potential weak points that could be attractive to attackers.
Through the same personal cabinet, customers can download distribution packages and installation instructions for PT X. The update also expands the use of machine learning by combining large language models with classical ML techniques to speed up early-stage attack detection and response. Analysis of low- and medium-severity incidents is now automated, freeing experts to concentrate on more critical threats.
Another new feature provides analysis of the external attack surface. PT X shows internet-accessible resources from the viewpoint of a potential attacker and helps identify weaknesses before they can be exploited. According to Positive Technologies, the platform has already detected and helped stop serious attacks in half of the organizations where it has been deployed. The company also conducts regular cyber testing in which researchers attempt to achieve unacceptable events and receive rewards for successful findings, supplying customers with concrete recommendations for improving defenses.
