Fortress launches AI platform for critical infrastructure cyber risk
Fortress.ai has launched the Fortress Command Platform, an AI-native risk platform designed to help utilities, federal agencies and defense organizations manage cyber supply chain risk. The platform combines AI agents, customer data, proprietary risk intelligence and Fortress analysts to identify exposures, coordinate remediation and document results.
- Fortress.ai launched the Fortress Command Platform on Nov. 10, 2026.
- The platform targets utilities, federal agencies and defense organizations.
- AI agents analyze supply chain data and act on operational exposures.
- Fortress analysts validate findings and support remediation with vendors.
- The platform documents actions and remaining risks for oversight and reviews.
A platform built for supply chain risk
The Fortress Command Platform ingests, analyzes and enriches data across critical supply chains, including the vendors, products and information technology and operational technology assets they deliver. It uses that information to prioritize exposures according to their potential impact on operations and missions.
Fortress said the platform was rebuilt with AI at its core to support continuous analysis across vendors, assets and compliance requirements. AI agents can act on exposures that threaten operations, while Fortress analysts validate critical findings, assess their implications and work with vendors and customer teams on remediation.
The company positions this approach as a response to changes affecting critical infrastructure supply chains, including geopolitics, energy dislocation, data center construction, the reshoring of manufacturing and the arrival of AI. According to Fortress, infrastructure and the supply chains behind it face kinetic, economic and cyber threats.
From findings to verified action
The platform addresses three connected tasks. First, it connects information across vendors, products and cyber assets to determine what requires attention. Second, it combines analyst validation with hands-on support to coordinate remediation across suppliers and customer teams, while tracking responsibilities and progress.
Third, it documents validated findings, remediation actions and remaining risks. Fortress said this evidence can help security teams, leadership and boards assess progress and support audits and regulatory reviews.
The platform brings together disciplines that have traditionally operated in separate tools and teams, including governance, risk and compliance, third-party risk management, cyber supply chain risk management, software supply chain security, vulnerability management and AI governance. Connecting them is intended to help organizations assess how supplier, technology and compliance risks affect one another.
Why the company is combining AI with analysts
Fortress said organizations responsible for essential services and national security face more risk than human teams can find, prioritize and fix alone. At the same time, the company said AI cannot yet be trusted to act independently when mistakes could have operational consequences.
Its model assigns high-volume analysis to AI agents and validation and remediation support to Fortress experts. Alex Santos, Fortress co-founder and CEO, said in the announcement that customers need “outcomes” rather than more alerts. He said success means customers know what needs attention, have support to address it and can demonstrate what has been resolved.
The Fortress Command Platform is available for organizations seeking to manage cyber supply chain risk across the technology lifecycle, from evaluating suppliers and purchasing products to securely deploying technology and managing emerging exposures. Fortress directs organizations to its website to request a demo.
