Bank of America CEO Brian Moynihan said 1,000 contractors hired in the second quarter to patch AI-exposed software flaws remain, on top of 3,000 staff. The headcount can anchor a budget; the dollar figure released with it cannot.
Perspective Coverage
9 publishers
- Builder
- Builder 24%
- Operator
- Operator 42%
- Investor
- Investor 34%
Reality
- Evidence58
- Adoption50
- Hype gap+25
- Incentives60
- Confidence65
Vicarius puts a human reviewer and a deterministic judge between its AI-written fixes and production
ScriptAI drafts detection and remediation logic for software flaws that have no vendor patch behind them. Vicarius says the draft, review and verify cycle finishes in under an hour, against weeks by hand. It is live for vRx customers today.
Reality
- Evidence32
- Adoption12
- Hype gap+35
- Incentives80
- Confidence40
buildOne report1 publisher depproof: unmaintained flag doesn't change the remedy; only 3 of 933 findings lacked a fix version
A public measurement across five ecosystems puts one component in seven down as unmaintained, though its own findings data shows that almost never changes what you can do about an advisory today.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap−12
- Incentives55
- Confidence55
buildOne report1 publisher Sourcegraph's fleet migration agent repairs failing CI only after you hand it a log-reading token
Sourcegraph's new migration agent scopes a codebase-wide change from one prompt and pauses at every stage by default. Fixing its own red builds is a separate configuration step that needs a token which can read your CI logs.
Publishers:sourcegraph.com
Reality
- Evidence38
- Adoption32
- Hype gap+33
- Incentives88
- Confidence60
Nozomi Compass puts OT change approvals on the asset feed that powers Vantage
Nozomi Networks is selling industrial operators the argument that their remediation backlog is a bookkeeping problem. Compass is the product it wants holding the asset record, the approvals and the audit evidence.
Reality
- Evidence24
- Adoption
- Not scored
- Hype gap+38
- Incentives88
- Confidence32
buildOne report1 publisher Cisco's remediation path for a suspect virtual email gateway starts with a new VM
For virtual appliances where exploitation is suspected, Cisco's advisory lists five actions before the box can be trusted again, one of which is installing fixed software. Owners of physical appliances are told to call TAC.
Publishers:cisco.com
Reality
- Evidence66
- Adoption
- Not scored
- Hype gap+6
- Incentives70
- Confidence62
buildOne report1 publisher Clearing Mythos Preview's 6,105 open findings at 97 fixes per two months takes a decade
Project Glasswing surfaced an estimated 6,202 high or critical vulnerabilities in foundational open source, with 97 confirmed fixed in two months. What the confirmation count actually measures decides how much of that gap is real.
Reality
- Evidence22
- Adoption
- Not scored
- Hype gap+45
- Incentives60
- Confidence28
buildOne report1 publisher FAZE Security raises $6M to keep rerunning the exploit after the fix ships
Formerly CYTRIX, the company says more than 25 agents exploit, rank, route and then retest customer systems continuously. The accuracy and growth figures are self-reported, and the 0.1% false-positive rate comes without a sample or a period.
Reality
- Evidence30
- Adoption30
- Hype gap+40
- Incentives80
- Confidence58
buildOne report1 publisher wkhtmltopdf has been read-only since 2023, and your scanner will only accept migration
An archived binary with an SSRF advisory and no fixed version turns a patch ticket into a template re-approval project. Picking the replacement engine is the cheap part.
Reality
- Evidence38
- Adoption
- Not scored
- Hype gap+18
- Incentives82
- Confidence45