The Fine Print

from crewai import Agent, Task, Crew
from langchain_openai import ChatOpenAI
llm = ChatOpenAI(model="gpt-4-turbo", temperature=0)
threat_agent = Agent(
    role='Threat Intelligence Analyst',
    goal='Determine if a specific CVE is actively exploited in the wild (CISA KEV, EPSS).',
    backstory='Data-driven analyst focused on real-world exploitability.',
    verbose=True,
    llm=llm
)
asset_agent = Agent(
    role='CMDB Context Analyst',
    goal='Determine the business criticality and exposure of the vulnerable asset.',
    backstory='IT operations expert who understands the blast radius of server downtime.',
    verbose=True,
    llm=llm
)
orchestrator_agent = Agent(
    role='Patch Deployment Orchestrator',
    goal='Create a prioritized patching ticket including the necessary deployment scripts.',
    backstory='Release manager who balances security urgency with IT stability.',
    verbose=True,
    llm=llm
)
vuln_data = """
CVE: CVE-2026-12345 (CVSS 9.8)
Asset: SRV-WEB-PROD-01 (Internet-facing, hosts customer portal)
OS: Ubuntu 22.04
"""
threat_task = Task(
    description=f'Analyze the exploitability of this CVE: {vuln_data}',
    expected_output='Exploitability assessment and EPSS context.',
    agent=threat_agent
)
asset_task = Task(
    description=f'Evaluate the business risk of patching or not patching this specific asset: {vuln_data}',
    expected_output='Asset risk and exposure assessment.',
    agent=asset_agent
)
ticket_task = Task(
    description='Based on the threat and asset data, draft a high-priority IT service ticket. Include the exact apt-get commands needed to remediate the Ubuntu server.',
    expected_output='Formatted IT service ticket with remediation steps.',
    agent=orchestrator_agent,
    context=[threat_task, asset_task]
)
patch_swarm = Crew(
    agents=[threat_agent, asset_agent, orchestrator_agent],
    tasks=[threat_task, asset_task, ticket_task]
)
if __name__ == "__main__":
    print("Initiating Vulnerability Management Swarm...")
    ticket = patch_swarm.kickoff()
    print("\n--- Patch Deployment Ticket ---\n")
    print(ticket)