Tokyo's AndDot launches "FDE for Security", putting the same on-site engineer in charge of finding and fixing vulnerabilities
AndDot, a Shibuya firm that embeds forward deployed engineers with clients, said on Nov 10 it is extending that model to security: one resident FDE runs AI-assisted vulnerability scans and agreed penetration tests, then implements the fixes and leaves a process for handling new vulnerabilities.
AndDot Inc., a Tokyo company whose main business is placing resident forward deployed engineers inside client companies, announced a new service called FDE for Security on November 10. Instead of handing clients a vulnerability report, the FDE who runs the assessment also implements the remediation: correcting configurations, changing application code, reworking permissions and rebuilding authentication systems.
The service has three parts. The FDE runs AI-based vulnerability checks and penetration tests whose scope is agreed with the client in advance, prioritizes the findings by business impact, fixes them in one-to-two-week cycles, and then builds a process in which AI matches newly disclosed vulnerabilities against the client's systems so the FDE can prepare response steps. The goal is for the client to keep monitoring and first response going after the engagement ends.
AndDot delivers the work through what it calls a Forward Deployed Unit: the on-site FDE plus a Success Partner at headquarters who keeps priorities aligned with the client, and Experts who join for advanced attack techniques or industry-specific issues. AndDot's chief technology officer argued in the announcement that an assessment report is most valuable the day it arrives and loses value every day its findings go unfixed.
The launch is another sign that the FDE model is spreading beyond AI app building into adjacent work like security, and it shows how Japanese vendors are packaging FDEs as small units with back-office support rather than as solo engineers.
Source: prtimes.jp