ekera What’s new at Ekera AI
Ekera AI improves continuously, from two sources: monitoring of research and threats, and feedback from the CIOs and architects who use it. Each improvement is measured on a test bench of fictitious companies and adopted only if it does better, after a human decision. This page sets out what has been found, decided and improved, and why.
- Found : what monitoring of news and research has spotted
- Decided : a choice made, and the reason for it
- Improved : a measured change, adopted after a human decision
- Published : a text or page put online
Entries, most recent first
Decided
A partner space for IT services firms, managed service providers, brokers and insurers
The partner follows all its clients in the same screens and issues assessments and reports under its own letterhead. The company remains the holder of its account: it accepts the partner’s access, sets its scope and can withdraw it. A broker or insurer only sees what the policyholder chooses to send. Reason: a partner manages dozens of clients, and each client must keep control of its data.
Decided
Ekera does not replace your IT services firm
Ekera prepares the decision: the map, the costed risks, the compared work. Your IT services firm or managed service provider carries it out, from a clear, costed and prioritised request; Ekera installs nothing itself. The map stays yours: if you change provider, the knowledge of your information system does not leave with them. Reason: a mid-sized company should not depend on the memory of a single provider, and its providers gain from clients who know what they want.
Found
Nextcloud Collabora flaw CVE-2026-110447, exploited
The Collabora document server built into Nextcloud lets in an attacker without an account, even when the app is disabled. For a CIO: knowing where Nextcloud runs, in-house and at providers, with which apps, then updating or removing this one.
Decided
Wider launch offer, contributor rate and free trial
The €1,500 excl. VAT assessment is open to the first twenty customers, on the isolated platform. A −25% contributor rate is for the customer who agrees that its corrections, made anonymous, improve the shared rules and catalogue: voluntary, revocable at any time, nothing raw. A free trial, “the map of one activity”, runs for 30 days on up to 10 documents. List prices do not change. Reason: to grow faster the network of customers who correct their map, without lowering prices.
Decided
Ekera also runs on an air-gapped network, with no Internet access
A third way to run Ekera, after the isolated platform and the dedicated instance: a signed virtual machine image installed by your IT department, or a loaned appliance, returned with an erasure certificate. For an information system spread over several networks, each zone produces a signed export that you move through your own channel. Nothing leaves your network, except the report you keep. Reason: the most sensitive customers cannot open their network.
Found
GitLab flaw CVE-2026-110264, rated 10 out of 10
An unauthenticated flaw affects self-hosted GitLab since 2014, and the 12 October fix is no longer enough. For a CIO: know how many GitLab instances run in-house and at service providers, update them, then renew the tokens and secrets they hold.
Found
PHP flaws found with the help of AI
Two critical PHP flaws, found with the help of AI, led to sites being taken offline as a precaution. For a CIO: know where this component is used, including at a service provider or inside a purchased product, and decide in advance who may shut down what.
Found
Extortion of 38 maritime companies: the single-supplier lead
A supplier that keeps its customers’ archives can expose all of them at once. For a CIO: knowing which provider holds which data means responding in hours rather than weeks.
Published
Our vision: agents serving critical processes
The “Our vision” text sets out where Ekera AI is heading: tomorrow, within the rules and budgets the company sets, its agents will adapt the architecture to protect critical processes. Every decision will remain traceable and reversible, and a human will stay in control of anything beyond the agreed limits.
Published
Continuous improvement, under human decision
The method explains how Ekera AI improves: from monitoring and feedback, each improvement is measured on a test bench of fictitious companies and adopted only if it does better, after a human decision.
Published
Sharing stays voluntary, even off the Internet
A company can receive the alliance’s alerts without sharing anything itself; on a dedicated instance or installed on its premises, nothing feeds the common base. For installations cut off from the Internet, alerts arrive in a signed package imported by the customer itself.
Published
A mutual defence alliance for mid-sized companies
When a company spots a threat, its signals, validated and anonymised, help the others spot it and protect themselves: an attack on one becomes an alert for all. Defence stays defensive: no retaliation, no counter-attack.
Found
AI agents coordinating against Hugging Face
In July 2026, AI agents coordinated on their own to attack Hugging Face. For a CIO: watching them one by one is no longer enough; to defend, you need to know your information system and share signals.
Found
VPN, firewall, email: three flaws already exploited
Ivanti, Palo Alto Networks and Cisco reported exploited flaws in widely used edge devices. For a CIO: after a compromise, every secret on the device must be renewed, and an up-to-date map of what depends on it speeds up the response.
Found
NIS2: the French Resilience bill postponed again
The bill transposing NIS2 into French law has been postponed again, with no new date. For a CIO: the obligations, set by the directive, are already known, and customers and insurers are not waiting for the law.
Published
Shared security: what is in place, what is planned
A page sets out what Ekera does to be secure, with its security roadmap, and who tests what: the tests, audits and certifications on that roadmap cover Ekera itself, not its customers’ architecture.
Request an assessment
A first 30-minute call: framing your need, the possible scope and the list of information needed for the assessment. The initial assessment starts from your documents and exports, with no direct access to your information system.
Further reading
- Insights (in French)What changes for mid-sized companies, sources included.
- Continuous improvementMeasured on a test bench, adopted after a human decision.
- Research and developmentA safe, verifiable architecture AI.