Ethiack Zero

Ethiack Zero is a public record of emerging vulnerabilities from Ethiack. It ingests early signals and patches, produces working checks or exploits, and publishes how quickly each vulnerability is validated alongside how quickly attackers exploit it.

What It Is

Zero is a live feed and tracker of new vulnerabilities, including ones that do not yet have a public CVE ID. For each entry it shows a status (validating, validated, or waiting for further signals), whether a working check or a full exploit has been produced, and public signals such as cve.org publication, known-exploited (KEV) status, and public proof-of-concept code. Entries also carry an internal Ethiack tracking ID, an affected product and version range, and a CVSS score where available.

How the Validation Timeline Works

The site defines time-to-validate as how long it takes Zero to confirm a signal is exploitable from first ingestion, and time-to-exploit as how long after public disclosure attackers exploit a vulnerability in the wild. A timeline view uses median times with cve.org publication as time zero, and a scatter and distribution view plots each vulnerability relative to that point. Feeds can be filtered by status, outcome, and public signals, and searched by CVE ID, package, or module.

Access and Integration

The feed is exposed through API endpoints (/api/v1/feed and /api/v1/live) and an MCP server so it can be connected to AI agents. A methodology page and documentation are published on the site. Ethiack states that the modules created by Zero run continuously against its customers' attack surfaces through the Ethiack platform.