Enterprise security programs have largely been built around periodic assessments and checkbox frameworks, designed to ensure bare-minimum compliance with regulations to avoid penalties. The annual or quarterly testing cycles accompanying this approach create dangerous blind spots in the time between engagements. In contrast, threat actors operate continuously while defenses are only validated at moments in time, leading to a growing gap between what compliance certifies and what adversaries are actually attempting to exploit.
AI Enters the Picture—and Widens the Gap
The AI explosion of recent years has created a paradigm shift in many areas, from defense to regular business operations to cybercriminal efforts. The adoption of automation-first security strategies is an effort that promises to close the speed deficit against attackers and relieve the burden on human defense teams. At the same time, adversaries are increasingly leveraging AI to accelerate reconnaissance, phishing, and malware development, enabling them to launch more convincing and effective attacks at scale.
On both sides of the equation, detection and discovery are becoming commoditized, raising the stakes for what comes after. The industry is rapidly arriving at a critical inflection point as a result of widespread AI implementation. If AI usage is no more than table stakes for both attackers and defenders, the differentiator for both sides must shift elsewhere.
The Acquisition as a Deliberate Argument
In a calculated step toward sophisticated, AI-empowered security functionality, cybersecurity and AI firm Suzu Labs recently announced the acquisition of adversary emulation company Emulated Criminals. This acquisition is not merely for the company’s capability, but for a methodology rooted in U.S. Special Operations doctrine. The emulated crime as a service (ECaaS) model used by Emulated Criminals is an approach that replicates active threat actor tactics across cyber, human, and physical domains.
This deal establishes a dedicated Continuous Adversarial Operations (CAO) practice within Suzu Labs, effectively operationalizing the acquisition rather than simply absorbing it into existing areas of the company. The addition of Emulated Criminals demonstrates Suzu Labs’ understanding of where the significance lies in modern AI-enhanced cybersecurity. “Discovery was never where the real work was,” according to Mike Bell, Founder and CEO of Suzu Labs. “The real work is judgment, campaign design, and detection validation.”
What "Hacker in the Loop" Actually Means in Practice
The approach taken by Suzu Labs to integrating Emulated Criminals highlights the company’s dedication to the human-led side of AI-enhanced security. Human operators provide adversarial reasoning that AI is not capable of replicating, including campaign design, social engineering, and defender psychology. The Hacker in the Loop layer of Adversarial Exposure Validation (AEV) involves the CAO team executing named adversary operations at enterprise scale, validating people and processes, not just technology.
The operations of this team involve multi-vector simulations that span a wide range of areas such as phishing, ransomware, insider threats, and physical intrusion testing. This enables continuous engagement to replace the previously used point-in-time model, keeping the pressure on defenses even in the time between formal assessments.
The Reckoning This Forces for Enterprise Security Leaders
This acquisition underscores the vital importance of industry-wide reevaluation of adversarial testing methods and AI adoption. CISOs must confront the question of whether their testing actually reflects adversarial reality, rather than simply documenting whether testing occurred. The Suzu Labs model previews where AEV is heading for the industry at large. Human expertise is being reframed not as a cost center to be automated away, but as the irreducible core of mature security programs. The acquisition of Emulated Criminals serves as a marker that in a world of AI-enabled offense, the organizations that survive will be those that train the same way that they fight.
