• HOSTS
  • IMAGES
  • EXPOSURE
  • HUMAN

How to hunt cloud vulnerabilities with your AI

Connect Lacework to your agent to start scanning your environment. Once connected, your agent can query your cloud infrastructure for specific security gaps.

Ask AI about this page

Short answer

How can I use my AI to find cloud vulnerabilities?

Your agent uses Lacework tools to pull lists of vulnerable hosts and container images. It then maps these to specific CVE exposures so you know exactly what to patch. You get a clear view of your cloud risk.

Where findings land.

The outcomes of your hunt.

Your agent organizes the data into these specific categories.

HOSTS

Vulnerable host lists

The AI identifies specific instances with known flaws. You get a list of targets that need immediate attention.

IMAGES

Container image risks

Your agent scans your registry data for vulnerable images. This helps you catch bad code before it reaches production.

EXPOSURE

CVE exposure maps

The AI maps CVEs to your active assets. You see which vulnerabilities are actually reachable in your environment.

HUMAN

Remediation planning

The AI provides the data, but you decide which patches to roll out. You use these lists to drive your security response.

The workflow

What your AI does when the data arrives.

The agent acts as a bridge between your security queries and Lacework telemetry.

  1. Identify weak hosts

    The agent pulls a list of hosts currently showing vulnerabilities in your cloud environment.

    list_host_vulnerabilities

  2. Scan container images

    It checks your containerized workloads to find images containing exploitable packages.

    list_container_vulnerabilities

  3. Map CVE exposure

    The agent looks for specific CVE identifiers to see how much of your footprint is at risk.

    search_cve_exposure

  4. Summarize risk

    The AI aggregates these findings into a single report for your review.

    search_cve_exposure

Try it

Copy these to start.

Use these prompts to kick off your hunt.

Starting points

Swap out the specific CVE IDs or resource names to get targeted results.

Lacework Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_xT38bIhhFhzvvpfxyO01Dv9Iop7sXt66wD8neHzv/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Lacework capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "lacework-cloud-security-cnapp-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_xT38bIhhFhzvvpfxyO01Dv9Iop7sXt66wD8neHzv/mcp"
    }
  }
}
Copy into chat04

  • List all vulnerable hosts in my Lacework account.

  • Find all container images that have high-severity vulnerabilities.

  • Search for any exposure related to CVE-2023-44487 in my cloud footprint.

  • Which hosts are most at risk from the latest container vulnerabilities?

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect Lacework once, then ask.

You only need to link your account once. Your credentials stay encrypted, and you can start querying your cloud data through any compatible client immediately.

Connect Lacework to your AI

FAQ

How this task behaves.

  • 01

    Can the AI fix the vulnerabilities for me?

    No. The AI only identifies and reports vulnerabilities. You must manually perform the remediation or use your own automation tools to patch the hosts and images.

  • 02

    Does the AI delete any data in Lacework?

    No. The tools only allow the AI to read vulnerability and exposure data. It cannot modify, delete, or change any configurations in your Lacework account.

  • 03

    Can I search for a specific CVE ID?

    Yes. You can ask the agent to find exposure for any specific CVE identifier.

  • 04

    Does this work for both VMs and containers?

    Yes. The agent can query both host vulnerabilities and container image vulnerabilities.

  • 05

    Can the AI create new security policies?

    No. The available tools are limited to reading vulnerability and exposure data. The AI cannot create or update security policies.

  • More questions about Lacework? See everything the Lacework Connector can do

Connect Lacework to Claude, Cursor, ChatGPT & more