What Echo is
Echo provides vulnerability-free container images including automatic patching, hardening, and FIPS-validation. Echo images are built on top of common distributions in order to make integration easier, and recognized by major vulnerability scanners. The vendor site is www.echo.ai. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Echo covers
Echo is in the catalog for these capabilities. Categories: Container Vulnerability. Catalog tags: Best for Enterprise and Best for MidMarket.
How to evaluate Echo in a security program
Use Echo as a stack candidate, not as diligence evidence. The oneNorma score for Echo is 4.8/10 (percentile 34). If the real gap is in Container Vulnerability, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.echo.ai publishes. Contrast it with pentesting and Security Cloud & Compliance.
