# Ethiack Zero

> A public live tracker of emerging 0-day vulnerabilities that measures how fast Zero validates exploitability versus how fast attackers exploit them.

Ethiack Zero is a public record of emerging vulnerabilities from Ethiack. It ingests early signals and patches, produces working checks or exploits, and publishes how quickly each vulnerability is validated alongside how quickly attackers exploit it.

## What It Is

Zero is a live feed and tracker of new vulnerabilities, including ones that do not yet have a public CVE ID. For each entry it shows a status (validating, validated, or waiting for further signals), whether a working check or a full exploit has been produced, and public signals such as cve.org publication, known-exploited (KEV) status, and public proof-of-concept code. Entries also carry an internal Ethiack tracking ID, an affected product and version range, and a CVSS score where available.

## How the Validation Timeline Works

The site defines time-to-validate as how long it takes Zero to confirm a signal is exploitable from first ingestion, and time-to-exploit as how long after public disclosure attackers exploit a vulnerability in the wild. A timeline view uses median times with cve.org publication as time zero, and a scatter and distribution view plots each vulnerability relative to that point. Feeds can be filtered by status, outcome, and public signals, and searched by CVE ID, package, or module.

## Access and Integration

The feed is exposed through API endpoints (/api/v1/feed and /api/v1/live) and an MCP server so it can be connected to AI agents. A methodology page and documentation are published on the site. Ethiack states that the modules created by Zero run continuously against its customers' attack surfaces through the Ethiack platform.

## Features
- Live feed of emerging vulnerabilities and 0-days
- Time-to-validate and time-to-exploit metrics
- Timeline and distribution visualizations
- Filtering by status, outcome, and public signals (CVE, KEV, public PoC)
- Search by CVE ID, package, or module
- Check and exploit validation status per vulnerability
- Public API feed endpoints
- MCP server for AI agents
- Published methodology

## Integrations
Model Context Protocol (MCP), Ethiack platform

## Platforms
WEB, API

## Pricing
Free

## Links
- Website: https://zero.ethiack.com
- Documentation: https://zero.ethiack.com/docs
- EveryDev.ai: https://www.everydev.ai/tools/ethiack-zero