An Agentic Multi-Agent Architecture for Affordable Cybersecurity Risk Management

arXiv·medium signalXBlueskyLinkedInCopy link

This paper proposes a multi-agent system delivering NIST CSF-aligned cybersecurity risk assessments at a fraction of the $15K+ cost of traditional consulting engagements, targeting small organizations priced out of enterprise security. Specialized agents handle each of the five NIST CSF functions (Identify, Protect, Detect, Respond, Recover) with coordination logic for cross-function findings. Directly actionable for builder-practitioners who want to embed defensible security posture assessments into their products.