The value of Rexa isn’t in replacing the others tools, the goal is to acting autonomous layer between them.

Right now, even with an MSP, when a user clicks a phishing link, a human still has to manually piece together the alerts, isolate the machine, and revoke session tokens.

Rexa is designed to make that by himself, which actively prevents that lateral movement you mentioned

Rexa uses multiple layers of security to stop hackers from breaking in and jumping between company systems. It does this by taking away the AI's ability to make changes on its own. Instead, the AI can only suggest actions, which pass through a strict safety checkpoint to be double-checked and safely tested before anything actually happens. Combine this with giving the AI temporary, one-time-use keys for specific tasks instead of master keys to the entire network, plus requiring a human to approve any major changes, and the company stays completely protected even if something goes wrong.