Battle stations raised against LLM vulnerabilities! CrowdStrike has just unveiled the QuiltWorks project.
The motivation behind its launch is simple yet worrying: frontier AI models are now surfacing logical bugs, design flaws, misconfigurations and new exploit paths that conventional methods would not have identified. In doing so, they dangerously shrink the window of time available to security teams between discovering a flaw and its exploitation.
A heavyweight coalition in the industry
Among the publisher, several major players in cybersecurity and consulting are involved: Accenture, EY, IBM Cybersecurity Services, Kroll, and OpenAI. The coalition relies on frontier AI models developed by OpenAI and Anthropic to analyze applications and codebases, with the aim of identifying vulnerabilities that can actually be exploited and that neither automated scanners nor human reviews are able to detect.
The CrowdStrike Falcon platform, which processes thousands of billions of security events daily, provides the technological backbone of the initiative. It applies adversary knowledge and attack-path analysis to prioritize risks according to their real exploitability, beyond CVSS scores alone.
“As frontier AI accelerates the discovery of vulnerabilities, boards around the world ask their CISO: are we exposed, and are we protected? The QuiltWorks project is how the industry comes together to give each organization the answer its board needs,” explains George Kurtz, CEO and founder of CrowdStrike.
A four-step service structured for impact
The QuiltWorks project offers a structured engagement built around four phases:
- Assessment: evaluation of the current setup, the level of maturity, and the organization’s remediation capability.
- Model Deployment: analysis of applications and codebases by frontier AI models to identify exploitable vulnerabilities.
- Risk Prioritization: prioritization of findings by Red Teaming experts, taking into account exploitability, adversary activity, and business impact.
- Remediation: guided remediation and board-ready reporting to provide a clear view of risks and the actions to take.
In parallel, CrowdStrike is launching the Frontier AI Readiness and Resilience service, offered directly to its clients as a subscription payable in Falcon Flex credits. It is a continuous, expert-led and AI-assisted support program.
The stated ambition is to roll out this response at industrial scale. The QuiltWorks project network comprises more than 10,000 certified professionals, tasked with accelerating remediation at the code level directly within client companies.