Blog

Ten hours. That's how long defenders now have between a vulnerability disclosure and the first exploitation attempt in the wild. In 2021, that window was 400 days.

The directive validates risk-based remediation, but its real lesson is operational: context, ownership, SLA governance, and auditability now matter as much as severity.

Faster vulnerability discovery will not reduce risk unless organizations can prioritize, assign, remediate, and prove what actually gets fixed.

On June 15, 2026, EPSS v5 goes live. For the Exploit Prediction Scoring System, it's an important update in its history: a 23% improvement in the model's ability to correctly surface the vulnerabilities that are actually likely to be exp.

Objective 200 connectors: our next goal to bring value to our clients. Today, we reach the milestone of over 130 connectors. And this is just a step: our roadmap is taking us quickly toward 200 native integrations. This acceleration is no coincidence. It reflects a founding conviction at Hackuity: vulnerability management only makes sense if it integrates into the real ecosystem of security teams, without forcing them to change their tools, workflows, or habits.

For two decades, cybersecurity teams have relied on a familiar arsenal: SAST scanners, DAST scanners, infrastructure scanners, CNAPPs, EDR telemetry, and endless streams of CVEs. Detection logic evolved. Coverage expanded. Dashboards multiplied. But the operating model itself barely changed. Then came generative AI. And suddenly, the question is no longer whether AI can assist security scanners. The question is whether AI models like Anthropic’s Claude are becoming scanners themselves.