The traditional approach to vulnerability management could be facing a major shift as artificial intelligence makes it possible to identify and exploit software flaws before they are publicly documented.
Echo has introduced Echo Frontier, a new offering designed to protect enterprises from previously unknown vulnerabilities without requiring them to wait for a CVE, scanner signature or official vendor patch.
Historically, organizations have depended on public vulnerability disclosures and upstream software maintainers to trigger remediation. However, advances in AI-powered vulnerability research are challenging that model, with increasingly capable systems able to discover exploitable flaws ahead of the established disclosure process.
Echo Frontier is designed to reverse the sequence. Instead of waiting for disclosure before remediation begins, the platform discovers vulnerabilities, validates them using working proofs of concept, develops and tests patches, and privately delivers protected software to customers before coordinating public disclosure.
“AI models are completely rewriting the vulnerability lifecycle,” said Eilon Elhadad, co-founder and CEO of Echo. “If AI can find vulnerabilities before the traditional security ecosystem is able to, remediation has to move earlier as well.”
As an authorized CVE Numbering Authority, Echo can coordinate vulnerability notifications and disclosure with software maintainers while customers receive validated fixes. Once official upstream patches become available, customers can transition to those versions.
The company says this approach is already producing results. In a recent case involving OpenEXR, Echo discovered a high-severity denial-of-service vulnerability and protected customers within approximately two days. The upstream fix followed around two months later.
The offering also includes exploit validation, application compatibility testing and evidence documenting remediation, addressing concerns about whether early fixes can be deployed safely across enterprise environments.
Echo Frontier is generally available, extending the company’s existing software supply chain security capabilities into pre-disclosure vulnerability protection.
