ZCode is now open source, and the reported security issues have been addressed.
https://t.co/Bq5B6nEnWM
We take the community’s feedback very seriously and apologize for the concern and frustration these issues have caused. We have been working closely with the ZCode team to investigate and remediate the issues raised.
Independent security reviews by third-party firms are now underway. We will share the findings and provide further updates as they become available.
We sincerely appreciate the developer community’s feedback and continued scrutiny. We will continue to monitor the review process closely and provide updates.
In response to the ZCode product security issues reported by the community, we have completed the necessary remediation and sincerely apologize to all our users.
We have open-sourced ZCode at https://t.co/oADgletuha, placing the code under community scrutiny and making ZCode more open and transparent.
We sincerely thank the community developers who previously identified issues in ZCode. Going forward, we will establish an ongoing product security vulnerability reporting and response process. We welcome developers to continue reviewing ZCode and reporting potential issues, and we will provide rewards based on the severity of the issues reported.
With respect to the code data referenced by the community, we confirm that no such data is retained and that it has never been used for model training.
Following the remediation, we invited the China Academy of Information and Communications Technology (CAICT) and NSFOCUS to conduct security assessments. The results are as follows:
Through its technical assessment, CAICT confirmed that the zcode-prod Alibaba Cloud OSS bucket is in a zero-data state. Security remediation has been completed in the ZCode v3.14.0 client. The Repo Wiki feature has been removed, and the workflow for generating and uploading local repository snapshots has been disabled.
NSFOCUS confirmed that all data objects in the zcode-prod Alibaba Cloud OSS bucket, as well as the bucket itself, have been deleted. Remediation has been completed in the ZCode v3.14.0 client. The Repo Wiki entry point and the associated generation workflow have been removed, and no functional path capable of triggering the generation of local repository snapshots or transmitting local files externally was identified.
Once again, we sincerely apologize and welcome continued scrutiny from the community. The full security assessment report will be released soon.
Step 5 Preview is built for professional knowledge work — from large-scale research to structured analysis and interactive reporting.
It coordinates research at scale and turns evidence into finished, auditable deliverables. In one agent action, it coordinated 950 web fetches and assembled 300,000 monthly records across 1,000 locations over 25 years; in another, it produced a 17-sheet analytical workbook with source reconciliation, formulas, and trend models.
Its outputs span technical engineering, creative production, analytical reporting, and public communication.
Step 5 Preview works across software environments and sustains execution over long horizons.
Its capabilities extend from software engineering and web applications to 3D workflows and programmable hardware.
Over longer horizons, Step 5 Preview keeps track of prior results, uses execution feedback to decide what to try next, and continues iterating. We test this behavior in runs lasting up to 24 hours, including tasks involving GPU kernel optimization and automated post-training.
Introducing Step 5 Preview: Advancing the Pareto Frontier.
Step 5 Preview is our new flagship model for agentic work, delivering frontier-level performance across software engineering and professional knowledge work, with particular strength in finance.
- 600B total / 27B active MoE, with 1M context + Vision
- Substantially lower task cost at comparable intelligence
- Broad software engineering capabilities with sustained execution over long horizons
Try Step 5 Preview: https://t.co/fC7HHlWKFn
Model page: https://t.co/4caJR2YGD3
Open weights on Oct 15.