# Voidhawk

> Voidhawk is AI-native exploit defense for web apps and APIs. It works with any CDN or WAF (one click on AWS WAF), reads the intent of traffic hitting your application and, when it is an exploit, writes a virtual patch to that WAF and alerts your SOC.

CVEs have exploded: 48,185 were published in 2025, 20% more than in 2024. AI is surfacing bugs that sat in software for decades (AI found all 12 CVEs in OpenSSL's January 2026 release, some dating back to 1998), AI-generated code fails security tests about 44% of the time (Veracode, 2026), and exploitation now routinely starts before a patch exists (Mandiant M-Trends 2026), while the median time to patch is 43 days (Verizon DBIR 2026). Offense got AI first and defense is racing to catch up: criminal and state groups now hand attacks to AI (Anthropic disrupted a state-sponsored espionage campaign in 2025 in which AI ran 80 to 90 percent of the work), frontier models have broken out of test sandboxes on their own (two OpenAI models broke into Hugging Face's servers during a cyber evaluation in July 2026), and personal AI agents are multiplying across the web (nearly 25 billion AI agent requests in Q3 2026, per DataDome). Voidhawk closes the gap by putting offensive-grade AI on defense. PHP2Shell (CVE-2026-109618 and CVE-2026-109619, CVSS v4 9.2, unauthenticated code execution in the PHP engine, patched October 21, 2026) is the current example: attacks were reported before the patches shipped. Voidhawk does not find or fix zero-days. It understands what traffic is trying to do and sees what is happening; when traffic is driving an exploit, including one that reaches shell access, it writes a virtual patch to the customer's existing WAF in real time and alerts their SOC. It works with any CDN or WAF with no programming required; on AWS WAF it is a one-click add-on. Built by ZioSec, an AI red team company.

- **Status:** early access; works with any CDN or WAF, one click on AWS WAF
- **Book a technical call:** https://calendly.com/aaron-ziosec/15-min-chat
- **Contact:** info@ziosec.com

## Product

- [Home](https://voidhawk.ai/index.md): AI-native exploit defense for web apps and APIs: the console tour, rules vs reasoning, the PHP2Shell case, and deploying on any CDN or WAF (one click on AWS WAF)
- [How it works](https://voidhawk.ai/how-it-works.md): Works with any CDN or WAF (one click on AWS WAF): understand intent, write the virtual patch, alert the SOC; what changes, and what Voidhawk does not do

## Company

- [Who we are](https://voidhawk.ai/who-we-are.md): Built by the ThreatX core team behind ZioSec, the autonomous AI red team: the story, the quote, the people
- [Careers](https://voidhawk.ai/careers.md): Join the ZioSec team building Voidhawk. Founding Enterprise Sales Lead: role, compensation, benefits, and how to apply
- [Contact](https://voidhawk.ai/contact): Early access, a technical call, or press: the form lands with the people building Voidhawk

## Resources

- [Blog](https://voidhawk.ai/blog.md): Research, build notes, and threat analysis from the team building Voidhawk. Each post also serves a Markdown twin at /blog/<slug>.md

## Blog posts

- [Lessons in Offensive AI That We're Applying to the Firewall](https://voidhawk.ai/blog/offensive-ai-lessons-firewall.md): Five lessons from building AI attackers, and the defensive decisions they shaped in Voidhawk.
- [Why the World Needs Voidhawk](https://voidhawk.ai/blog/why-the-world-needs-voidhawk.md): AI attackers adapt. Static signatures fall behind. Why Voidhawk puts reasoning at the center of exploit defense.
- [The Proliferation of Frontier-Class AI Attacks](https://voidhawk.ai/blog/frontier-class-ai-attacks.md): A field guide to autonomous AI attacks: how they find vulnerabilities, chain exploits, and adapt when blocked.

## Optional

- [Sitemap](https://voidhawk.ai/sitemap.xml)