Security Verification and Offensive-Defensive Practice
Gartner's Latest Release: Trend and Value Analysis of Adversarial Exposure Validation (AEV)
Gartner's recently released Market Guide for Adversarial Exposure Validation (March 2025) reveals a major shift in the security validation space. This article will analyse these key findings, their implications for your organisation's security strategy, and why continuous threat exposure validation is critical to modern security defence.
01 Market Evolution: From BAS to AEV
Gartner's report marks an important evolution in the security validation market. Once-siloed Breach and Attack Simulation (BAS) along with automated penetration testing and red teaming technologies are converging into a more comprehensive domain: Adversarial Exposure Validation (AEV). This shift reflects the real-world challenges organisations face: simply finding vulnerabilities is not enough to ensure security. Enterprises need to validate whether these vulnerabilities are actually exploitable and understand their real impact within their specific environments.
According to Gartner's predictions, 40% of organisations will adopt formal exposure validation programmes by 2027, indicating significant growth potential in this space.
02 Three Core Use Cases of AEV
Gartner's research identifies three key use cases supported by AEV solutions, each helping organisations manage security risks more effectively:
Optimising Defence Posture
When you invest in security tools and technologies, how do you ensure they are performing at their best? AEV provides:
Validation of existing security controls' defensive capabilities against known threats
Optimisation recommendations tailored to specific vendor security controls
Measurable trend data to demonstrate improvements in your defensive posture
For organisations that have already invested heavily in security technology, this use case provides a clear path to achieving a higher return on investment.
Improving Exposure Awareness
Faced with thousands of potential vulnerabilities, how do you determine which ones require immediate remediation? AEV helps to:
Filter and confirm whether theoretical vulnerabilities are actually exploitable in your environment
Provide exposure context through attack path mapping to determine true priorities
Link security testing with business impact, making resource allocation more targeted
This capability is particularly suited for organisations looking to transition from traditional vulnerability management to a more comprehensive Continuous Threat Exposure Management (CTEM) programme.
Scaling Offensive Testing Capabilities
Building and maintaining a highly skilled red team is costly, and talent is scarce. AEV technology enables you to:
Create and execute complex attack scenarios via automated workbenches
Increase red team productivity and coverage without adding headcount
Seamlessly integrate threat intelligence into testing scenarios
This offers a pragmatic path for organisations looking to initiate or scale internal red teaming capabilities.
03 The Differentiating Value of AEV
Compared to traditional Exposure Assessment Platforms (EAPs) and vulnerability management tools, AEV solutions offer unique value:
Validation, Not Just Theory
AEV adopts a "closed-loop" approach to validating exposure. When traditional tools report a vulnerability, AEV will:
Validate the existence of the vulnerability in your actual environment
Create realistic attack scenarios targeting that vulnerability
Test whether your security controls and teams can effectively defend against it
This approach provides irrefutable results, helping you make more informed security decisions.
Automation and Consistency
Through automated scheduling and execution, AEV solutions achieve:
Frequent and consistent testing without requiring extensive specialised expertise
Comparable results, helping you measure security improvements over time
More efficient use of limited security resources
Bridging the Gap Between Offense and Defense
AEV technology facilitates collaboration between blue and red teams:
Blue teams gain practical insights into how defensive systems respond to the latest threats
Red teams can create and automate testing scenarios more efficiently
Security leadership receives quantifiable data to validate the effectiveness of security investments
04 Practical Recommendations for Starting with AEV
Based on Gartner's research, we recommend clients take the following steps:
Start with Clear Outcomes
Before choosing an AEV solution, determine the primary goals you wish to achieve:
Is it to optimise existing security controls?
Is it to improve vulnerability prioritisation capabilities?
Is it to augment internal red team capabilities?
Focusing on a single outcome is often more effective than attempting to achieve all goals at once.
Establish Data-Driven Business Value
Different organisations have different justifications for investing in AEV:
Validating the capabilities of products from existing security vendors
Optimising the efficiency of the Security Operations Centre (SOC)
Compensating for exposures caused by infrequent testing or inconsistent patching
Scaling internal red team capabilities
Clarifying your specific needs will help you build a more compelling business case.
Begin with Defence Optimisation
If you are unsure where to start, Gartner suggests starting with defence optimisation. This area:
Requires less specialised expertise
Provides more immediate, visible results
Lays the groundwork for more complex AEV use cases down the road
Secara Security Validation Platform: A Leading AEV Solution in China
Amid the rapid development of the global AEV market, Secara, as a pioneer in China's security metrics and validation space, is leading industry innovation with its AI-powered adversarial security validation platform. Perfectly aligning with the three core use cases highlighted in Gartner's report, the Secara Security Validation Platform provides enterprises with a comprehensive exposure validation solution.
Taking an attacker's perspective, the platform utilises real APT attack scenarios and first-hand victim threat intelligence, combined with AI intelligence derivation technology, to comprehensively evaluate an enterprise's security defence system. Through an AI assistant that intelligently selects or orchestrates various attack scenarios, the platform executes adversarial validation to precisely identify defensive weak points. The system can analyse all relevant logs generated during the complete attack process—including outcomes, alerts, and audits—not only locating security defence weaknesses but also identifying gaps in processes and personnel, thereby delivering an all-round security posture assessment.
Unlike traditional solutions, the Secara platform is based on actual data and leverages AI technology to provide actionable mitigation, remediation, or enhancement recommendations, helping customers build true active defence capabilities. The platform's powerful intelligent adversarial capabilities include core technologies such as AI-driven threat intelligence mining and analysis, intelligent orchestration and execution of attack scenarios, automated security posture assessment and optimisation, and machine learning-based mitigation recommendation generation.
Whether you want to optimise existing security products/tools, improve exposure awareness, or augment security team capabilities, the Secara Security Validation Platform can help you proactively position your cybersecurity defences and build a stronger, more proactive security defence system in a constantly evolving threat environment. Contact us today to discover how the Secara platform can build a truly effective security validation solution for your organisation.
