Search papers, labs, and topics across Lattice.
The Self-Evolving Agentic Operating System (SE-AOS), named Mako, is introduced as an innovative AI agent that dynamically enhances its exploit capabilities by observing failures and synthesizing new functionalities during runtime. Mako, developed within the LaunchSafe platform, achieves unprecedented performance by successfully exploiting 104 containerized web applications across 26 vulnerability classes, ensuring that results are verifiable and not fabricated. The key finding reveals that once a capability is discoverable, the difficulty of exploitation diminishes significantly, highlighting the importance of capability over reasoning in autonomous systems.
Once a capability is discoverable, autonomous exploitation becomes trivial, challenging our understanding of security vulnerabilities.
We introduce the Self-Evolving Agentic Operating System (SE-AOS): a new class of AI agent that treats exploit capability as a mutable, versioned kernel it extends at runtime, observing its own failures, synthesising new capabilities, proving them against a live target, and hot-loading them back into itself. Mako is the first SE-AOS instance for security research and the autonomous web exploitation engine developed within LaunchSafe. LaunchSafe builds autonomous security agents for continuous offensive testing and agent-driven security research; Mako is the core engine behind that platform. On the public XBOW validation-benchmarks, 104 containerised, CTF-style web applications spanning 26 vulnerability classes across three difficulty tiers, Mako achieves full-suite coverage: it drives every one of the 104 targets to emit a cryptographically fresh, per-build flag, under a verification regime that makes fabricated or memorised results impossible. Our central result is a law of autonomous exploitation: once a capability exists and is discoverable, difficulty collapses; capability, not reasoning, is what is scarce, together with an architecture and formalism that turn that law into a self-improving system. Mako further runs a gated self-evolution loop that proposes, sandboxes, and commits improvements to its own agents and rules when fitness does not regress. We deliberately withhold the operational results, payloads, exploit chains, and tool source, because a system that reduces full-spectrum web exploitation to a repeatable, machine-speed pipeline is dual-use research of concern. We publish the science; we withhold the weapon.
