Time to exploit in 2018 was 771 days. Now it's 0.
Offense is accelerating much faster than defense, and we have empirical data to show this. What the data tells us is more interesting than any single vulnerability. Cyber is fundamentally changing, and time to exploit is a good proxy to show how.
We already know about too many vulnerabilities. Even if we patched everything today, there's more tomorrow. We're producing more code than ever, and most attacks still start with phishing. More discovery doesn't move the needle.
What we need is a fundamentally more efficient way to build resilience. My theory of change is to democratise advanced offensive capabilities to trusted organisations, giving them the same tools that will be used against them. Continuous agentic attack and defence, running in your environment, improving how you detect and respond in real time. When you think about where AI is heading, towards superintelligence, this is how you protect against it. Not by finding every vulnerability, but by building organisations that can take the hit and respond before it becomes a crisis.
We need more people thinking about how we can scale defence, and this is fundamental to why we created 0Labs.