solventcyber.com

What it is

Solvent CyberSecurity is a vendor focused on AI-driven security products and services. Its website presents three product lines: ArgusWatch, a threat intelligence MSSP platform; VulnPilot, an Agentic-AI vulnerability management platform; and CyberSentinel AI v2.0, an offensive security platform. It also offers services such as MDR, threat intelligence, penetration testing, and employee training. Its core messaging centers on open source, local deployment, reduced manual triage, and avoiding false or fabricated data.

Core capabilities and deployment

In terms of protection coverage, Solvent spans threat intelligence, vulnerability prioritization, domain/SSL/vulnerability assessment, managed detection and response, and penetration testing. VulnPilot is the product with the most detailed information available: it uses 5 AI agents to ingest scan results from OpenVAS, Nessus, Qualys, or CSV files, then combines them with intelligence sources such as EPSS, CISA KEV, NVD, abuse.ch, OTX, GreyNoise, and Shodan. It replaces a purely CVSS-based approach with the six-factor VPRS model, and supports AI debate, automatic ticket creation, SLA assignment, and continuous re-testing. For deployment, the website emphasizes 100% local operation, quick startup via Docker, and keeping data on the local machine, making it suitable for teams with stricter data-control requirements.

Pricing and integrations

For pricing, VulnPilot and CyberSentinel are clearly labeled as free, open source, and "$0 to start." Local models can be used through Ollama, while upgrades to Claude or GPT-4o mention $5 credits. However, pricing for MSSP, MDR, consulting, and penetration testing is not publicly listed and requires booking a discussion. Integration support appears strong: VulnPilot alone covers at least 27 integrations, including scanners, threat intelligence feeds, ServiceNow/Jira ticketing, and alerts via Slack, Teams, Email, and PagerDuty.

Pros and cons

The main advantages are that it is open source and auditable, local operation reduces the risk of data leaving the environment, and its vulnerability management workflow moves beyond simply “answering questions” toward automated triage, ticket creation, and alerting. VPRS weighting is transparent and can be tuned based on threat intelligence, KEV status, dark web exposure, asset criticality, reachability, and existing controls. The drawbacks are also clear: the website does not disclose country of operation, compliance certifications, customer references, SLA details, or third-party effectiveness validation. Claims such as “85% noise reduction” lack external proof. Its service support capability, delivery coverage, and enterprise-grade operations assurance still need further verification.

Who it is for and access from China

It is best suited to security teams, MSSPs, or budget-sensitive organizations with some existing security maturity that want locally deployed AI-based vulnerability management and threat intelligence capabilities. It is less suitable for large enterprises that rely entirely on managed SaaS, require clearly documented compliance certifications, or need local Chinese-language support before making a direct purchase. The source text does not provide information on access from mainland China, and payment methods are also unspecified, so these should be treated as “unknown.” For deployment in China, teams should prioritize testing GitHub/Docker dependencies, connectivity to external intelligence sources, availability of Claude/GPT-4o, and whether local open-source scanners and domestic security service providers are needed as alternatives or supplements.