Echo today launched Echo Frontier, a new offering designed to protect organizations from frontier AI vulnerabilities, zero-days uncovered by LLMs, before public vulnerability disclosure.
Frontier AI models are rapidly advancing vulnerability discovery and exploitation, and that power is moving beyond tightly controlled environments with clear security guardrails.
According to Anthropic research published Sept. 29, Zhipu AI’s open-weight GLM-5.3 developed working end-to-end exploits in 50 of 410 attempts on the ExploitBench benchmark, against 56 for Claude Mythos Preview. Unlike Mythos Preview, GLM-5.3 can be used by anyone. Anthropic called its release “a meaningful step change in the cyber capabilities available to attackers.” As a result, unknown flaws can be found and exploited before a CVE, scanner detection, or upstream patch exists, leaving already overwhelmed security teams struggling to keep pace.
This is now an executive-level problem. The ability to identify previously unknown, potentially exploitable vulnerabilities creates a material business risk: once an organization knows a vulnerability exists, it needs a reliable way to act on it.
From AI discovery to enterprise protection
Discovering vulnerabilities is only half the challenge. Reliably and quickly fixing them is harder. Research from 1Password’s Off-by-1 Labs found that 54% of 6,080 AI-generated patches either failed to fix the vulnerability, introduced a new one, or both.
Frontier goes beyond generating a patch, with fixes validated against the exploit and compatibility-tested through the full application in a cloud environment before delivery, so they can be deployed without breaking application behavior. Customers also receive an evidence trail documenting detection and remediation to support compliance requirements.
Echo is already identifying and remediating previously unknown vulnerabilities. In one recent case, it discovered a high-severity denial-of-service vulnerability in OpenEXR. Echo validated the flaw, developed and compatibility-tested a patch, and protected customers within approximately two days, around two months before an upstream fix became available.
Remediation before disclosure
Echo Frontier builds on Echo’s existing infrastructure for vetting, patching, rebuilding, and delivering open-source software. The process includes:
- Discover: Hunts for unknown vulnerabilities using model-driven analysis and human-led security research.
- Validate: Reproduces findings against a working proof of concept and identifies affected versions.
- Notify: Alerts maintainers and coordinates disclosure as an authorized CVE Numbering Authority (CNA).
- Patch and test: Develops and backports fixes where needed, validating that patches stop the vulnerability without breaking application behavior.
- Deliver: Privately delivers patched software through customers’ existing JFrog or Nexus infrastructure.
- Converge: Moves customers to the official upstream fix once available.
Instead of the traditional lifecycle: Discover → Disclose → CVE → Fix → Enterprise remediation
Echo Frontier enables: Discover → Validate → Fix → Protect → Disclose → Converge upstream
Echo Frontier is now generally available. To learn more, visit https://www.echo.ai/product/frontier
New Echo Frontier Protects Enterprises From Mythos-Era Zero-Days
Posted in Commentary with tags Echo on October 14, 2026 by itnerdEcho today launched Echo Frontier, a new offering designed to protect organizations from frontier AI vulnerabilities, zero-days uncovered by LLMs, before public vulnerability disclosure.
Frontier AI models are rapidly advancing vulnerability discovery and exploitation, and that power is moving beyond tightly controlled environments with clear security guardrails.
According to Anthropic research published Sept. 29, Zhipu AI’s open-weight GLM-5.3 developed working end-to-end exploits in 50 of 410 attempts on the ExploitBench benchmark, against 56 for Claude Mythos Preview. Unlike Mythos Preview, GLM-5.3 can be used by anyone. Anthropic called its release “a meaningful step change in the cyber capabilities available to attackers.” As a result, unknown flaws can be found and exploited before a CVE, scanner detection, or upstream patch exists, leaving already overwhelmed security teams struggling to keep pace.
This is now an executive-level problem. The ability to identify previously unknown, potentially exploitable vulnerabilities creates a material business risk: once an organization knows a vulnerability exists, it needs a reliable way to act on it.
From AI discovery to enterprise protection
Discovering vulnerabilities is only half the challenge. Reliably and quickly fixing them is harder. Research from 1Password’s Off-by-1 Labs found that 54% of 6,080 AI-generated patches either failed to fix the vulnerability, introduced a new one, or both.
Frontier goes beyond generating a patch, with fixes validated against the exploit and compatibility-tested through the full application in a cloud environment before delivery, so they can be deployed without breaking application behavior. Customers also receive an evidence trail documenting detection and remediation to support compliance requirements.
Echo is already identifying and remediating previously unknown vulnerabilities. In one recent case, it discovered a high-severity denial-of-service vulnerability in OpenEXR. Echo validated the flaw, developed and compatibility-tested a patch, and protected customers within approximately two days, around two months before an upstream fix became available.
Remediation before disclosure
Echo Frontier builds on Echo’s existing infrastructure for vetting, patching, rebuilding, and delivering open-source software. The process includes:
Instead of the traditional lifecycle: Discover → Disclose → CVE → Fix → Enterprise remediation
Echo Frontier enables: Discover → Validate → Fix → Protect → Disclose → Converge upstream
Echo Frontier is now generally available. To learn more, visit https://www.echo.ai/product/frontier
Leave a comment »