Hexaware Technologies introduced the Zero Vulnerability cybersecurity offering on August 19, 2026, designed to address the growing pressure on enterprise remediation caused by AI-driven vulnerability discovery. The company noted that while AI helps surface vulnerabilities faster, security and engineering teams often lack the capacity to investigate and fix them efficiently.

Citing the Verizon 2026 Data Breach Investigations Report, Hexaware highlighted that only 26% of critical Known Exploited Vulnerabilities were fully remediated last year, down from 38%. The median time to resolve these issues rose from 32 to 43 days, with 99% of AI-discovered vulnerabilities remaining unremediated. The new offering aims to help organizations sort through findings, identify high-risk items, and verify removal in production rather than simply marking tickets as closed.

Delivered through Zerovity, Hexaware’s AI-led delivery layer, the offering combines cybersecurity expertise, engineering, and remediation operations across all variants of IT systems. These include custom applications, SaaS and PaaS environments, third-party software, and operating systems. The platform supports the lifecycle from ingestion and validation through prioritization, routing, fixing, verification, and closure, integrating with existing security tools rather than requiring replacements.

“AI is making vulnerability discovery dramatically faster, but enterprise remediation capacity remains finite. Zero Vulnerability is about changing that equation, cutting through the noise, identifying what truly matters, accelerating remediation, and proving that critical exposure has actually been removed,” said Mohit Vaish, EVP and Business Head of Cybersecurity at Hexaware.

Hexaware’s internal evaluation demonstrated the importance of validation. Across four detection lanes on production codebases, 334 findings were consolidated, of which 14 were ultimately verified as real. A developer-validated review of 262 findings also identified a new authentication-bypass weakness that pattern-based rules had missed.

What the Numbers Show

The effectiveness of the offering is underscored by the significant reduction in false positives during Hexaware's internal testing. With only 14 out of 334 consolidated findings verified as real—a validation rate of roughly 4.2%—the data highlights the potential for AI-driven prioritization to reduce wasted effort on non-critical alerts. Furthermore, the identification of an authentication-bypass weakness missed by standard rules suggests that combining AI with human review can uncover security gaps that purely automated systems might overlook.

Integration with Zero Friction Enterprise

Zero Vulnerability serves as a key pillar within Hexaware’s Zero Friction Enterprise framework, which was introduced on August 17, 2026. The broader framework addresses operational and technological resistance across six pillars: Zero Vulnerability, Zero Tech Debt, Zero Backlog, Zero Defects, Zero Tickets, and Zero License. It is underpinned by Infinite Trust, a foundational layer focused on data readiness, security, governance, and observability.

Siddharth Dhar, President and Global Head of Digital IT Operations and AI at Hexaware, noted that the new offering gives teams a consistent way to prioritize and manage work across the technology estate. “AI helps get each issue to the right action and owner faster,” Dhar said, emphasizing the role of the agentic cognitive layer in providing a unified command center for intelligence and improvements.

Hexaware Technologies has reported finding no evidence of a data breach following claims that employee information had been exposed. The company stated that the employee data in question is old, indicating the alleged incident does not represent a current or active security compromise.

Company's position on the alleged breach

Hexaware Technologies addressed the matter by clarifying that its investigation found no proof supporting the data breach claims. The company noted that the employee information said to have been leaked pertains to old data, further distancing the incident from any recent or ongoing security event.

The company's response signals that it does not consider the alleged breach to represent a material or active threat to its current data security posture. No further details regarding the source of the claims or the scope of the employee information involved were provided in the available information.