Echo report finds AI shifts bottleneck from vulnerability discovery to remediation

Echo has released its Mythos Readiness Report, which argues that AI has largely solved vulnerability discovery and that the industry’s main constraint is now acting on known flaws. The report combines Echo’s platform telemetry, a study of nearly 40,000 CVE lifecycles, and a survey of over 80 security leaders, alongside an independent analysis of Anthropic’s Claude Mythos model.

Echo’s research found that 89% of known vulnerabilities already have fixes available, yet roughly 40% of fixable vulnerabilities remain unresolved for more than six months. Among exploited vulnerabilities, about three in four are weaponised after their first day of public disclosure, often against fixes that already existed. The survey found 37% of security leaders cited detecting more than they can fix as their biggest obstacle.

The report introduces a four-stage readiness framework, Exposed, Aware, Responsive and Proactive, and suggests most organisations sit in the second stage, where visibility has outpaced the ability to act. Echo is a company that provides vetted and hardened open-source software components.