@dabit3: This is like having an army of white hat hackers at your disposal. They break into your app, prove the exploit works, a…

X AI KOLs Timeline Tools
security white-hat-hackers vulnerabilities codebase open-source automated-fix agentic-mapreduce

Summary

Devin Security Swarm is a new tool that uses AI agents to automatically find and fix security vulnerabilities in codebases, achieving 72% recall at lower cost than alternatives.

This is like having an army of white hat hackers at your disposal. They break into your app, prove the exploit works, an open a PR that fixes it. It takes about 10 seconds to set up and can be automated to run nightly or weekly for any codebase. In an eval of real and recent vulnerabilities, which the models had never seen, Security Swarm found the bug in 72% of cases, the highest recall of any tool we tested, at ~2/3 the cost of the next most accurate alternative. If you have an OSS repo you'd like me to fork and run Security Swarm on, drop a link!
Original Article
View Cached Full Text

Cached at: 07/02/26, 12:15 AM

This is like having an army of white hat hackers at your disposal. They break into your app, prove the exploit works, an open a PR that fixes it.

It takes about 10 seconds to set up and can be automated to run nightly or weekly for any codebase.

In an eval of real and recent vulnerabilities, which the models had never seen, Security Swarm found the bug in 72% of cases, the highest recall of any tool we tested, at ~2/3 the cost of the next most accurate alternative.

If you have an OSS repo you’d like me to fork and run Security Swarm on, drop a link!

Cognition (@cognition): Introducing Devin Security Swarm

A more cost effective and accurate way to find security vulnerabilities in complex codebases, based on a new architecture: Agentic MapReduce.

Similar Articles

@AdamShao: Officially open-sourcing my vulnerability discovery tool: http://flounders.xyz This is an AI Agent-based fully automated vulnerability discovery workflow. You just tell the AI which project's vulnerabilities you want to find, and it will automatically download code and documentation, deeply audit the code, discover suspicious vulnerabilities, automatically verify them locally and online…

X AI KOLs Timeline

Flounder is an open-source AI agent-based tool that automates vulnerability discovery in codebases. Users describe the target and the tool autonomously downloads code, conducts deep code audits, tests vulnerabilities locally and online, and generates reports.