Watch the other hand.

Every vulnerability AI surfaces creates a fan-out of human administrative work: validate it, map it to suppliers, answer the customer questionnaire, update the register, document the fix, produce proof for auditors, insurers, regulators, and the board. In a single model generation, finding a Firefox vulnerability went from 22 found in two weeks to a contribution to 271 in one release,1 and exploit chains now cost roughly $2,000 each to build.2 Discovery scaled. The people doing the paperwork did not.

AI made finding vulnerabilities nearly free, and CVE submissions are up 263% since 2020,4 so the cost moved downstream to the human work of proving control. Carriers stopped accepting attestations and started demanding continuous, verified evidence. The regulatory curve landed with them: DORA live, the EU Cyber Resilience Act reporting from September 2026, the SEC four-day rule in force. The administrative layer is the one part of the market that is under-counted, under-automated, and growing faster than headcount can.

The category cannot be won with per-seat SaaS. The work is cross-functional, compliance-heavy, and liability-laden, so enterprises buy it as an outcome, from a name they trust, with someone accountable when the regulator calls. That is a consultancy sale. Evident deploys through Beyond Work, which already distributes AI automation through the major consultancies, with Accenture live and PwC following. The consultancies are also the first customer, because they run the third-party-risk factories today, and Evident lets them sell continuous assurance as a managed outcome at a structurally better margin.

Selling a security capability to the CISO means fighting procurement, the gatekeeper on every vendor. Selling it to procurement removes the fight, because procurement spends its own budget on its own outcome, inside the workflow it already owns. The first workblock, the procurement security gate, clears low-risk suppliers in minutes instead of the 31 to 90 days a control assessment runs today.5 The data position that first sale builds makes every follow-on cheaper, up the ladder into insurance, compliance, and cost of capital.