CrowdStrike launches Project QuiltWorks coalition to tackle AI-discovered vulnerabilities

CrowdStrike Holdings Inc. today announced the launch of Project QuiltWorks, an industry coalition aimed at helping enterprises find and fix the wave of software vulnerabilities being surfaced by frontier artificial intelligence models.

The coalition brings together Accenture PLC, Ernst & Young Global Ltd., IBM Corp.’s Cybersecurity Services arm, Kroll LLC and OpenAI Group PBC alongside CrowdStrike, with frontier model support from OpenAI and Anthropic PBC. The pitch is that frontier models are uncovering logic bugs, design flaws, misconfigurations and novel exploit paths that legacy scanners and human code review miss, collapsing the window defenders have between discovery and exploitation.

“As frontier AI accelerates vulnerability discovery, every board in the world is asking their chief information security officers the same question: are we exposed and are we protected?” said George Kurtz, chief executive and founder of CrowdStrike. “Project QuiltWorks is how the industry comes together to give every organization the answer their board needs.”

The coalition leans on CrowdStrike’s Falcon platform, which processes trillions of security events daily, combined with a partner network the company says includes more than 10,000 certified professionals to drive remediation at the code level. The company argues the model moves organizations past Common Vulnerability Scoring System-based triage by using adversary intelligence and attack path analysis to rank which vulnerabilities an attacker can actually reach.

Launch partners are framing Project QuiltWorks as a response to an AI-driven shift in the threat landscape, with Harpreet Sidhu, global lead for Accenture Cybersecurity, saying that the coalition will deliver “the operational muscle to remediate code-level issues and help clients build full-scale protection.”

David Cooper, Americas cyber commercial leader at EY, said most organizations are not ready to manage the class of vulnerabilities frontier models introduce, while Mark Hughes, global managing partner of cybersecurity services at IBM Consulting, said the tie-up with CrowdStrike extends IBM’s Autonomous Security approach to manage the new risk class “at machine speed.”

Alongside the coalition, CrowdStrike also today launched the Frontier AI Readiness and Resilience Service, a continuous, expert-led engagement sold as a 12-month renewable subscription purchasable through Falcon Flex dollars.

The new service covers assessment of an organization’s current security program, frontier AI-powered scanning of applications and code bases, red team prioritization of findings beyond Common Vulnerability Scoring System scores and guided remediation with board-level readouts.

OpenAI Chief Information Security Officer Dane Stuckey said the company is supporting the effort through its Trusted Access for Cyber program to accelerate vulnerability discovery and remediation across the ecosystem.

Project QuiltWorks and the AI vulnerability assessment are available immediately.

Image: CrowdStrike