Vicarius Launches ScriptAI to Automate Fixes for Unpatched Vulnerabilities

Vicarius Inc. has launched ScriptAI, an artificial intelligence engine designed to automate the creation of detection and remediation scripts for software vulnerabilities lacking vendor patches. The tool aims to reduce the time required to address such flaws from weeks to under an hour, addressing a critical gap in enterprise cybersecurity defenses.

ScriptAI Aims to Close the Patch Gap with AI

According to SiliconANGLE, Vicarius Inc. has introduced ScriptAI, an artificial intelligence engine designed to write detection and remediation scripts for software vulnerabilities that lack vendor patches. The tool targets the gap between public disclosure of a vulnerability and the availability of a working fix, a period that has become increasingly critical for enterprises.

Vicarius co-founder and CEO Roi Cohen described the challenge as a capacity problem, not one of discovery. ScriptAI automates the drafting of detection and remediation logic, which Vicarius researchers then verify before deployment. This process reportedly reduces the time required to address unpatched flaws from weeks to under an hour.

How ScriptAI Works Within the vRx Platform

ScriptAI operates as part of Vicarius’ vRx platform, according to SiliconANGLE. The tool generates scripts to detect and remediate vulnerabilities, which are then reviewed by Vicarius researchers. A deterministic judge—without involvement from language models—issues a pass or fail verdict for each fix, ensuring a standardized validation process.

Once verified, scripts are stored in the vScript library under a ScriptAI label. They run as native Bash and PowerShell at the operating system level, eliminating the need for additional agents or proprietary rule formats. Each validated case includes a cryptographically signed evidence manifest, allowing customers to verify the script’s authenticity and safety.

The tool adds a verification step to the process originally introduced by Vicarius’ vuln_GPT, enhancing the reliability of AI-generated fixes. Scripts also include safeguards: a pre-check to assess system compatibility, a rollback mechanism for failed fixes, and a post-fix verification step to prevent breaking changes in production environments.

Broader Context: The Urgency of Faster Remediation

SiliconANGLE cited data from Radware Ltd.’s Zero Day Clock, reporting that the mean time to exploit vulnerabilities reached negative eight hours as of July 2026. This metric, which tracks the window between vulnerability disclosure and active exploitation, highlights the shrinking timeframe defenders have to respond. In 2024, defenders had an average of 53 days to address vulnerabilities, underscoring the growing speed of attacks.

Roi Cohen was quoted by SiliconANGLE, stating, “If AI can find the vulnerability, AI should help build the protection.” The launch of ScriptAI aligns with Vicarius’ True Remediation framework, which includes three other pathways: vPatch for patching, vShield for attack prevention, and vScript for script-based remediation.

Funding and Availability

Vicarius raised $30 million in a Series B funding round led by Bright Pixel Capital in January 2024, as reported by SiliconANGLE. The company has positioned ScriptAI as a key addition to its platform, available to vRx customers starting September 23, 2026.

What this means

LazyFounders analysis — our interpretation, not reported fact.

For founders and operators in cybersecurity, ScriptAI represents a meaningful shift in how unpatched vulnerabilities are managed. The traditional cycle of waiting for vendor patches—often taking weeks—creates a window of exposure that enterprises can no longer afford, especially as the mean time to exploit vulnerabilities has dropped to negative eight hours.

Vicarius is framing this as a capacity problem, not a discovery one. By automating the creation and verification of remediation scripts, ScriptAI addresses the bottleneck of manual work, which is often slow and resource-intensive. The inclusion of a deterministic verification step and cryptographic signing also signals an effort to build trust in AI-generated fixes, a critical factor for enterprise adoption.

This launch could pressure other players in the vulnerability remediation space to accelerate their own AI-driven automation efforts. For operators, the key takeaway is the potential to reduce risk without scaling headcount—a compelling value proposition in a market where speed and reliability are non-negotiable.

Key takeaways

• ScriptAI automates the creation of detection and remediation scripts for unpatched software vulnerabilities, reducing remediation time from weeks to under an hour.
• The tool is fully integrated into Vicarius’ vRx platform and includes a verification step to ensure the safety and efficacy of generated scripts.
• Scripts are stored in the vScript library and run as native Bash and PowerShell, eliminating the need for additional agents.
• ScriptAI is the fourth component of Vicarius’ True Remediation framework, alongside vPatch, vShield, and vScript.
• Vicarius raised $30 million in a Series B round in January 2024, led by Bright Pixel Capital.
• The tool is available to vRx customers as of September 23, 2026.

FAQ

What is ScriptAI?

ScriptAI is an AI engine developed by Vicarius Inc. to write detection and remediation scripts for software vulnerabilities that do not yet have vendor patches. It operates within the vRx platform and includes a verification step to ensure the safety and efficacy of generated scripts.

How does ScriptAI reduce remediation time?

ScriptAI automates the drafting of detection and remediation logic, which Vicarius researchers then verify. This process reduces the time required to address unpatched vulnerabilities from weeks to under an hour.

What safeguards does ScriptAI include?

Scripts generated by ScriptAI include a pre-check to assess system compatibility, a rollback mechanism for failed fixes, and a post-fix verification step. Each validated script also includes a cryptographically signed evidence manifest for customer verification.

Is ScriptAI available to all customers?

ScriptAI is available to customers of Vicarius’ vRx platform as of September 23, 2026.

How does ScriptAI fit into Vicarius’ broader platform?

ScriptAI is the fourth path in Vicarius’ True Remediation framework, alongside vPatch for patching, vShield for attack prevention, and vScript for script-based remediation.

Related on LazyFounders

• More ai news
• SiliconANGLE Media