360 Launches nanoWork Enterprise Edition Channel Ecosystem with Native Security for AI Agents
On August 17, the 360 nanoWork Enterprise Edition partner recruitment launch event successfully convened, bringing together more than 200 channel partners from across China in a virtual gathering. This marked the first major assembly of channel partners since the product’s official release on July 28.
360 Group founder Zhou Hongyi stated at the event: “AI is moving from ‘being able to answer questions’ to ‘being able to complete tasks.’” The recruitment launch represents the critical step in turning this vision into reality by ensuring AI can truly “do work and deliver results,” supported by a security foundation, channel network, and service system.
360 Commercial Comprehensive Channel Department General Manager Wang Yi noted that the ToB enterprise digitalization sector is undergoing a definitive iteration, with AI agents replacing traditional office software as the next-generation productivity tool. The industry has shifted from conceptual observation to commercial deployment. Despite the trillion-dollar blue ocean opening, enterprise AI implementation remains challenging, with AI agent penetration in business operations at only about 18% and over 70% of AI projects failing to reach production environments.
Security as the Foundation
Wang Yi explained that 360 leverages more than 20 years of security accumulation to position nanoWork Enterprise Edition as a truly deployable enterprise-grade AI agent platform that improves efficiency and is easy for channels to sell and deliver. The product features “native security, built-in from the factory,” embedding 360’s two-decade security expertise and national-level cyber defense capabilities through mechanisms such as cloud isolation, permission control, and data protection. This allows enterprises to confidently assign real work to AI by controlling what the AI can see, do, and share results with.
Channel Architecture and Revenue Models
The company released its latest channel policy featuring a three-dimensional partner architecture, four profit models, and a five-tier empowerment system. The three-dimensional framework uses “classification × layering × grading”: classification divides partners into regional, industry, ecosystem strategic, and scenario co-construction categories; layering distinguishes between agency and joint-operation models; grading certifies core, key, and potential tiers with increasing benefits. Four core revenue paths cover account expansion, compute consumption, training services, and陪跑 delivery. The five empowerment systems provide training, certification, content, tools, and sales support through online live sessions, on-site training, certification bootcamps, dedicated learning platforms, and real-time sales assistance groups.
Service and FDE Network
Service remains central, supported by a 1,000+ frontline deployment engineer (FDE) legion and the AikerWorld community. FDEs, drawn from 360’s “white hat” teams, deliver six service modules including AI consultation, product training, customization, deep development, cloud陪跑, and on-site驻场 support. Two delivery modes are offered: an陪跑 mode bundled with product seats for guided adoption and standalone service packages for deeper implementation. The AikerWorld community connects AI developers, industry experts, and partners with PMI China’s 680,000 certified project managers to scale the expert network nationwide.
Through city-level channel partners, 360 combines headquarters capabilities with localized service to bring enterprise AI into real business scenarios across enterprises, stores, and industrial parks.
Related articles
AI Agent Workflow Exceeds 100-Unit ERP Limit Reaching 120 Due to Check-Then-Act Race Condition
A detailed case study demonstrates how an AI workflow authorized to order no more than 100 units of COMP-17 ended up creating 120 units across three suppliers. Each individual order of 40 units passed authorization checks returning ALLOW, yet the cumulative result violated the human-delegated mandate. The root cause was a classic check-then-act race condition where stateful permission tracking read the same initial balance concurrently before any updates occurred. Sequential stateful checks prevented the overrun, but concurrent execution allowed all three requests to read zero consumption and receive ALLOW. An improved design using PostgreSQL SELECT FOR UPDATE performs atomic reservation of the grant balance before calling the ERP system, ensuring only two orders succeed and the third is rejected with DENY_CAPACITY. The experiment used a deterministic planner without any LLM to isolate the authorization mechanism from model reasoning quality. Five key questions are provided for production deployments involving cumulative business limits delegated to agents.
SECURITM Launches MCP Server for External AI Access to Security Data
SECURITM has introduced an MCP server that connects external AI assistants directly to its platform data on assets, risks, tasks, and metrics. This marks the first such implementation among Russian SGRC and SOAR systems. The open MCP protocol enables natural language queries about critical assets without owners, overdue tasks, or monthly metric changes without manual data export. Supported tools include GigaChat, Yandex solutions, Claude, ChatGPT, Cursor, and compatible local models. Access remains strictly read-only through dedicated tokens with optional IP restrictions. The feature is available in paid cloud and on-premise editions and complements the platform’s built-in AI assistant.
One Year Left to Secure Systems as Open-Source GLM-5.3-Flash Enables Automated Cyber Attacks
Chinese company Z.ai Co. released GLM-5.3-Flash in August 2026, an open-weight model that achieves 84.5% on CyberGym and 54.4% on ExploitBench, matching or exceeding leading commercial LLMs in vulnerability discovery and exploitation tasks. The model runs locally on consumer hardware such as a single Nvidia DGX Spark or Apple M5 Mac Studio with 256 GB unified memory, allowing unrestricted use after abliterated versions remove safety alignments. Experts warn that LLM agents could soon scan and exploit zero-days across Windows, Linux, browsers, and messaging apps around the clock. Initiatives Project Glasswing (Anthropic-led) and Daybreak (OpenAI-led) are racing to patch critical vulnerabilities in open-source projects and critical infrastructure before the next generation of unrestricted models arrives. Organizations are advised to accelerate patch deployment, inventory supply chains, and adopt advanced LLMs defensively within the remaining one-year window.
RFC 9421 and Open wbauth Protocol Accelerate AI Agents 5.5x by Replacing Anti-Detect Browsers with Cryptographic Signatures
A new open implementation of the IETF RFC 9421 HTTP Message Signatures standard called wbauth allows AI agents to authenticate using Ed25519 cryptographic signatures instead of resource-heavy anti-detect browser farms. The approach eliminates the need for Camoufox, Playwright, or AdsPower instances that consume 500 MB to 1.5 GB of RAM per process and require residential proxy pools. Benchmarks show cold start time dropping from 1744 ms to 5 ms, request time from 86.8 ms to 15.8 ms, and memory usage from 500 MB to 0.76 MB. The system uses three HTTP headers for signing and verification against a public key directory hosted on Cloudflare Workers and D1. Server-side validation at the WAF or edge involves fetching the public key, canonicalizing the message per RFC 9421, verifying the Ed25519 signature, and checking timestamps to prevent replay attacks. The npm package wb-auth@0.4.0 and PyPI package wbauth-sdk==0.4.0 provide ready-to-use signers for Node, Bun, Deno, Python httpx, and requests. The full source is available on GitHub under the MrKoriy/wbauth repository.