NanoClaw, the open-source AI agent framework with more than 30,000 GitHub stars and 250,000 downloads, announced a partnership with Echo to deliver a hardened agent runtime that eliminates known software vulnerabilities from the entire environment where agents operate. The partnership makes NanoClaw the first open-source agent framework to offer its community a runtime secured down to the software layer, according to a joint announcement on July 29.
The Problem: Isolation Is Not Protection
Every AI agent runs inside a software environment that includes a browser, parsers, system libraries, and language runtimes. That stack carries thousands of known vulnerabilities that typically sit unpatched. Sandboxing an agent limits what it can reach outside its environment, but does nothing to protect the agent from exploits targeting the software inside.
“A modern prompt injection is like a social engineering attack: it lures the agent to an innocent-looking page, and a known hole in the browser turns that visit into a compromise,” said Gavriel Cohen, co-founder and CEO of NanoCo, the company behind NanoClaw, in the announcement. “Or it hands the agent a file, and a vulnerable parser turns opening it into code execution.”
How the Hardened Runtime Works
Echo rebuilds the entire agent operating environment from scratch, including only the components an agent actually uses: Chromium browser, Node.js, Bun, pnpm, corepack, Git, curl, and unzip. The rebuild process cuts the known vulnerability count from thousands to near zero, according to the companies.
Echo’s approach relies on purpose-built AI agents that monitor new vulnerability disclosures globally. When a CVE appears, Echo’s agents research the vulnerability, identify affected software, develop a fix, run compatibility testing, and open a pull request for human review. This continuous loop keeps the hardened runtime patched as new threats emerge.
“The standard software agents are built on carries thousands [of vulnerabilities], and most come from the underlying layers, not the application code,” said Eylam Milner, co-founder and CTO of Echo, in the announcement. “We rebuild that whole environment as a drop-in replacement so it starts secure, and our agents keep it that way as new vulnerabilities appear.”
NanoClaw users can opt in to the hardened runtime for free with a login during setup. The unauthenticated path for building a local runtime remains available.
Who Uses What
NanoClaw counts practitioners at Amazon, Gap, Google, Meta, SentinelOne, and Accenture among its users. Echo’s customer base includes Varonis, EDB, Webflow, and UiPath. Echo raised $50 million within 10 months of its founding. Both companies are based in Tel Aviv.
Two Layers of Enterprise Agent Infrastructure
The partnership addresses one of two technical layers enterprises need before deploying agents at scale. The MCP specification update released July 28 eliminated stateful sessions at the transport layer, enabling serverless agent architectures. NanoClaw and Echo now address the environment layer: the actual software stack running inside the agent’s sandbox.
Enterprise procurement teams have been rejecting agent deployments over governance, audit, and liability concerns, as Silicon Valley deal lawyer Louis Lehot reported at the Foley & Lardner CFO Executive Forum earlier this week. A runtime with zero known CVEs removes one of the concrete objections procurement teams raise when evaluating agent infrastructure.
The hardened NanoClaw runtime is available today on GitHub.