New Echo Frontier Protects Enterprises From Mythos-Era Zero-Days

This Echo offering provides the missing piece in AI-powered vulnerability discovery: turning newly discovered zero-days into tested patches before public disclosure

NEW YORK, Oct. 14, 2026 /PRNewswire/ -- Echo, which delivers frontier-hardened software across the enterprise software supply chain, today launched Echo Frontier, a new offering designed to protect organizations from frontier AI vulnerabilities, zero-days uncovered by LLMs, before public vulnerability disclosure.

Frontier AI models are rapidly advancing vulnerability discovery and exploitation, and that power is moving beyond tightly controlled environments with clear security guardrails. According to Anthropic research published Sept. 29, Zhipu AI's open-weight GLM-5.3 developed working end-to-end exploits in 50 of 410 attempts on the ExploitBench benchmark, against 56 for Claude Mythos Preview. Unlike Mythos Preview, GLM-5.3 can be used by anyone. Anthropic called its release "a meaningful step change in the cyber capabilities available to attackers." As a result, unknown flaws can be found and exploited before a CVE, scanner detection, or upstream patch exists, leaving already overwhelmed security teams struggling to keep pace.

This is now an executive-level problem. The ability to identify previously unknown, potentially exploitable vulnerabilities creates a material business risk: once an organization knows a vulnerability exists, it needs a reliable way to act on it.

"AI models are completely rewriting the vulnerability lifecycle," said Eilon Elhadad, co-founder and CEO of Echo. "The old assumption was that a vulnerability becomes public, gets a CVE and a fix, and then enterprises respond, but that sequence no longer holds. If AI can find vulnerabilities before the traditional security ecosystem is able to, remediation has to move earlier as well."

From AI discovery to enterprise protection

Discovering vulnerabilities is only half the challenge. Reliably and quickly fixing them is harder. Research from 1Password's Off-by-1 Labs found that 54% of 6,080 AI-generated patches either failed to fix the vulnerability, introduced a new one, or both.

"Frontier AI can now uncover zero-day CVEs, but without the means to fix them, every discovery becomes another liability," said Eylam Milner, co-founder and CTO of Echo. "We built Echo Frontier around the harder question: once a previously unknown vulnerability is found, how quickly can we turn it into software that is actually safe for an enterprise to run?"

Frontier goes beyond generating a patch, with fixes validated against the exploit and compatibility-tested through the full application in a cloud environment before delivery, so they can be deployed without breaking application behavior. Customers also receive an evidence trail documenting detection and remediation to support compliance requirements.

Echo is already identifying and remediating previously unknown vulnerabilities. In one recent case, it discovered a high-severity denial-of-service vulnerability in OpenEXR. Echo validated the flaw, developed and compatibility-tested a patch, and protected customers within approximately two days, around two months before an upstream fix became available.

Remediation before disclosure

Echo Frontier builds on Echo's existing infrastructure for vetting, patching, rebuilding, and delivering open-source software. The process includes:

• Discover: Hunts for unknown vulnerabilities using model-driven analysis and human-led security research.
• Validate: Reproduces findings against a working proof of concept and identifies affected versions.
• Notify: Alerts maintainers and coordinates disclosure as an authorized CVE Numbering Authority (CNA).
• Patch and test: Develops and backports fixes where needed, validating that patches stop the vulnerability without breaking application behavior.
• Deliver: Privately delivers patched software through customers' existing JFrog or Nexus infrastructure.
• Converge: Moves customers to the official upstream fix once available.

Instead of the traditional lifecycle: Discover → Disclose → CVE → Fix → Enterprise remediation

Echo Frontier enables: Discover → Validate → Fix → Protect → Disclose → Converge upstream

Echo Frontier is now generally available. To learn more, visit https://www.echo.ai/product/frontier 

About Echo

Echo delivers frontier-hardened software across the enterprise software supply chain. Containers, libraries, OS packages, VMs, and more are continuously vetted for supply chain threats and patched against known vulnerabilities and what frontier models discover next. Echo gives enterprises software that's secure by default and compatible with the tools and versions they already use.

SOURCE Echo Software Inc.