Legacy approach
Test once a year.
With 0sec
0-day vulnerabilities
we found.
Benchmarks test yesterday's vulnerabilities.
The frontier is novel vulnerability discovery.
CriticalRX buffer overflow on zero-length serial framesLinux kernel · mctp
CVE-2026-68124 · CNA 9.6 CriticalCriticalArbitrary code execution via crafted expressionsjsonata
CVE-2026-77413 · GHSA-8gq3-vp5j-2grpCriticalCross-tenant agent API-token minting@paperclipai/server
GHSA-47wq-cj9q-wpmp
MediumAnonymous /api/systemstatus leaks exception detailSwiss Federal Chancellery · government code
GHSA-32p4-g4fj-cg95
HighSlab use-after-free in AEAD decrypt completionLinux kernel · TIPC
CVE-2026-63801HighUse-after-free in MACsec offload RXLinux kernel · mlx5e
CVE-2026-72072HighMissing CAP_NET_ADMIN check on changelinkLinux kernel · vxlan / geneve
CVE-2026-68142 + CVE-2026-68432HighOOB read on frames shorter than the auth tagLinux kernel · mac802154
CVE-2026-68125HighMemory corruption in 802.15.4 llsec decryptLinux kernel · mac802154
CVE-2026-63831HighUse-after-free of metadata_dst in eswitch repr releaseLinux kernel · ice
Queued upstreamHighResource-exhaustion denial of servicejsonata
CVE-2026-52746HighUse-after-free in LE Audio CIG/CIS setupLinux kernel · Bluetooth
CVE-2026-63944HighStack buffer overflow in NFC digitalLinux kernel · NFC
CVE-2026-80803HighDouble-completion / double-free on resumeLinux kernel · xen-blkfront
Merged upstreamHighCertificate-chain validation bypassnode-forge
CVE-2026-33896
HighDenial of service via unbounded recursionprotobuf.js
CVE-2026-44289
HighInteger overflow in HTTP chunked-transfer parser → heap OOB readnng (nanomsg)
GHSA-cmhr-c7mj-hgx7
HighOOB from unvalidated ioctl buffer sizesLinux kernel · atomisp
In reviewHighUse-after-free of ghl_poke_timer / ghl_urb at driver unbindLinux kernel · HID sony
Merged upstream
HighUse-after-free on inrange_timer at teardownLinux kernel · HID uclogic
In reviewHighStale pen_input pointer on partial registrationLinux kernel · HID uclogic
In reviewHighUse-after-free of in-use VP9 framesLinux kernel · meson vdec
In reviewMediumOOB read on LLCP PDUs shorter than the headerLinux kernel · NFC
CVE-2026-80798CVSS pendingNULL-deref DoS paths via AMDXDNA_EXEC_CMDLinux kernel · amdxdna
CVE-2026-72091 + CVE-2026-72092CVSS pendingNULL deref on HT-cap without HT-oper in TDLSLinux kernel · mwifiex
CVE-2026-68197CVSS pendingOut-of-bounds read from unset MAC header on packet-socket TXLinux kernel · net/packet
CVE-2026-74667MediumOOB read in LLCP connect_sn TLV walkLinux kernel · NFC
CVE-2026-80800MediumOOB read in st21nfca ATR_REQ handlingLinux kernel · NFC
CVE-2026-80823CVSS pendingUse-after-free from carrier_work rearm on disconnectLinux kernel · ipheth
CVE-2026-74677
MediumHeap out-of-bounds write in ciscodump extcapWireshark
CVE-2026-15164
MediumTemplate injection → arbitrary file readUptime Kuma
CVE-2026-33130
MediumStack overflow via deeply nested collectionsyaml
CVE-2026-33532
MediumOOB read from assoc length underflowLinux kernel · ath6kl
Merged upstreamMediumOut-of-bounds read in LLCP SNL TLV parserLinux kernel · NFC
Queued upstreamMediumInteger overflow in frame-size calculationLinux kernel · atomisp
In reviewMediumOOB read from unvalidated directory-index countsLinux kernel · ocfs2
Merged upstreamMediumOOB read from unvalidated AV1 frame indicesLinux kernel · v4l2-ctrls
In reviewMediumOOB in NPU cmdstream tile validationLinux kernel · accel/ethosu
In reviewMediumOOB read in firmware-request handlerLinux kernel · Bluetooth btnxpuart
In reviewMediumOOB read in HT/VHT capability IE parsingLinux kernel · mwifiex
In reviewMediumOOB read in pairwise-cipher OUI walkLinux kernel · mwifiex
In reviewMediumECRED deferred-recvmsg race → list corruptionLinux kernel · Bluetooth L2CAP
In reviewMediumOOB read in port100 frame length handlingLinux kernel · NFC
In reviewLowReachable WARN DoS in rsa-pkcs1pad empty digestLinux kernel · crypto
Queued upstreamTraditional security tests don’t protect you from today’s cyberattacks.
The “pentesting” concept was designed for a slower, human-led attacker, and for a team that fixes things by hand.
Legacy approach
Only find known vulnerabilities.
70%of today’s exploits are 0-days, previously unknown
With 0sec
Find and fix the known and the unknown.
Legacy approach
Only test your web app.
44%of 0-days hit the operating system, not the web app
With 0sec
Test everything your company runs on.
Legacy approach
A long list to triage, full of false alarms.
With 0sec
Provide fixes for verified vulnerabilities,ranked by business impact.
Legacy approach
Hand over a PDF for a human to read.
With 0sec
Ship fixes your own agents can apply.
Legacy approach
One more SaaS dashboard to learn and log into.
With 0sec
Arrive in the tools your team already uses.
Legacy approach
Trust vendor benchmarks and take their word for it.
With 0sec
Run an open-source engine you can audit.
What do you test?
We begin with an agreed scope: selected codebases, packages, web applications, or AI systems. The target and test plan are set before work begins.
Is it autonomous?
The harness automates investigation and evidence collection. Humans set authorization and scope, then review findings before delivery.
How is this different from a scanner?
Scanners flag potential issues. We investigate approved leads and return reproducible evidence when a finding survives verification.
Can you run this against production?
Only with explicit written authorization and an agreed test plan. When production is not appropriate, we can use a staging environment.
What happens to our data?
Data handling is agreed for each engagement. Targets and findings stay within the approved engagement boundary.
Can we use this for SOC 2 or ISO 27001?
We do not sell certifications. Evidence from an engagement may support your own assurance work, subject to your review.
Is the harness open source?
The 0sec source and CLI are published under MIT OR Apache-2.0. 0cloud operations, customer data, target scopes, and internal records are not part of that release.
What does it cost?
You choose the target, number of agents, and hours per agent. We agree the scope and price before work starts, then stop at the approved ceiling.
