CyberAgents Exchange Digest: October 12–16, 2026

SWARM is going global. After the first SWARM at Black Hat USA, the next one is virtual, free, and open to security practitioners anywhere: November 2–6, sponsored by Tenable with support from Anthropic. Teams of one to three build open-source agents, skills or MCP servers for real security workflows, pitch to a panel of Tenable and Anthropic judges on November 5, and hear the winners announced live on November 6.

The top three teams split $10,000 in Claude credits. Winners also get a pass to Tenable’s EXPOSURE 2027 conference, a place on the CyberAgents Exchange and a SWARM winner patch.

Register for SWARM Global before registration closes on November 1, then join the SWARM Global Discord. The official rules have the details.

🔦 Spotlight#

Three new builder interviews this week.

SentinelOne AI Analyst: Claude Skills. A brand-new VPN gateway lands on Monday and has to be monitored by Friday. Sean Ebeling, Solutions Architect at SentinelOne, gets there in minutes: the skills onboard the log source, write the detections and build the response workflow.

Webapp Testing Checklist. Screenshots, proxy captures and evidence folders are what make a web app pentest report slow. Kevin Horvath of AccessIT Group hands that work to the Claude Code skill he built, and gets back 40 to 50 percent of the time the report used to take.

Remediation Priority & Impact Agent. Thousands of open findings and three scoring systems still don’t tell you what to fix first. Sean Jennings, Field CTO at Tenable, built an agent that ranks them by what attackers are exploiting right now, checked against CISA’s Known Exploited Vulnerabilities catalog and attack path analysis. In the demo, one command, /fix-today, works through nearly 20,000 assets and comes back with a short list and the change tickets to go with it.

🎉 Celebrations#

Contributions

• 🧩 Tenable.sc RHEL Migration and Recovery Skill by @conard0-git — Migrates Tenable Enclave Security / Tenable.sc to standalone RHEL 8 with an external PostgreSQL, keeping your data and runtime intact.
• 🔄 PCI ASV Scan Copilot by @jdelong-tenb — Updated: now walks you through external scans of web application targets as well as network ones, and maps findings to PCI DSS v4.0.1.

Badges earned

🛠️ Changelog#

Contributing partners on the homepage

The homepage has a new Contributing Partners section between the leaderboard and Recently Added, showing the companies building on the Exchange as a row of logo cards. Each logo takes you to that partner’s contributor profile, with everything they’ve built on the Exchange.

Introducing the CyberAgents Exchange Digest

You’re reading it. The weekly roundup now lives at /digest, linked from the main navigation. Every issue has its own dated address, like /digest/2026-10-16 for this one, and /digest/latest always opens the newest. The sections keep the same names every week, so you can link straight to one, like this changelog. Each issue has a Share button that stays with you as you scroll and Newer and Older links for past issues. There’s also an RSS feed if you’d rather follow along in a reader.

💬 Community#

• Welcome to everyone joining for SWARM Global: Emine, blue, Juan Molina, INTISAR, DaRuelas, toreida_turaida, fluffyneenja, Try4ever, Vivi Cruz, UnBreakableSoul and Melissa. Say hello, share what you want to build, and start finding your team before kickoff on November 2.

Until next time,
— Bee