The MITRE ATT&CK Enterprise Evaluations, widely regarded as the Olympics of cybersecurity, released results for Enterprise Round 7 (ER7) in December 2025. The evaluation, the most demanding in the program's history, incorporated cloud adversary emulation, identity-centric attacks, and cross-environment lateral movement for the first time simultaneously. Nine vendors participated, with the maximum protection rate reaching 31%—achieved by CrowdStrike and Cybereason. Notably, all nine vendors scored 0% on identity attack blocking, targeting techniques used by Scattered Spider, the criminal collective behind the MGM Resorts and Caesars Entertainment breaches. Cloud attack blocking rates ranged from 0% to 7.7%.
Three major vendors—Microsoft, SentinelOne, and Palo Alto Networks—withdrew from ER7, citing various reasons such as Microsoft's Secure Future Initiative, SentinelOne's characterization of evaluations as PR-driven, and Palo Alto Networks' internal innovation focus. Participation has declined from 30 vendors in 2022 to 11 in 2025, a 63% drop.
In contrast, VectorCertain LLC conducted an internal evaluation of its SecureAgent platform using ER7-aligned methodology, extending the scope to include a third adversary, Volt Typhoon, and additional governance dimensions. Over 14,208 tests across 38 techniques, SecureAgent achieved a 100% block rate with zero false positives. VectorCertain attributes this performance to its four-gate governance pipeline, which evaluates AI agent actions before execution, addressing structural limitations of traditional detect-and-respond architectures. The company has formally enrolled in MITRE's Enterprise Round 8 (ER8) for independent verification.
The ER7 results highlight a systemic issue: the global cost of fraud and cybersecurity losses reached $485.6 billion in 2023, with AI-specific attacks costing $15 billion in 2024. IBM's 2025 Cost of a Data Breach Report found that organizations using AI in prevention workflows saved an average of $2.22 million per breach. VectorCertain argues that the industry's reliance on detection after execution is a structural failure, and its SecureAgent platform represents a shift toward governance before action.
VectorCertain's founder, Joseph P. Conroy, has over 25 years of experience building AI systems for critical applications, including industrial gas detection and predictive diagnostics. SecureAgent is positioned as the first AI Safety and Governance platform in MITRE's ATT&CK Evaluations history.
For more information, visit vectorcertain.com. ER7 industry data is available at evals.mitre.org.
