ECHOS
The offensive side of the firm.
Stonepath IT is where the red work lives. ECHOS is its research program. The advisories it publishes land on this page, under a disclosure policy that was public before the first of them.
The program
ECHOS attacks the tools agents are handed.
An agent acts through its tools, so a weak tool makes a weak agent. ECHOS is the Labs' research program for finding the weak ones before someone else does.
- What it tests
- Self-hosted Model Context Protocol servers and agent infrastructure: third-party software anyone can install and connect an agent to.
- What it looks for
- What a tool can be made to reach, what it will trust, and what it will do on someone else's behalf.
- Why it is separate
- An Agent Boundary Engagement tests the same boundary inside one client's system, for that client. ECHOS works on public software, so what it finds can be published.
Advisories
First advisory Q4 2026.
Nothing published yet; the queue below is the commitment.
- ECHOS advisories: Vulnerabilities in self-hosted MCP servers and agent infrastructure, published after vendors have had time to fix them. Each ships with the reproduction, the CVE or GHSA identifier, and the timeline. Q4 2026.
Written up
The research our red work tests against.
Two preprints by Phillip Austin Green, each with a DOI. They sit on the research page with the rest of the public record.
Security contact
Found something in ours?
Reports about this site, or anything else Stonepath IT runs, go there. So do questions about an ECHOS finding in your own software. Good-faith research is covered by the safe harbor in the disclosure policy.
The same work, pointed at your agent.
An Agent Boundary Engagement runs this testing against your own system, with the scope and rules of engagement in writing before it starts.