{"id":145022,"date":"2026-08-19T15:44:11","date_gmt":"2026-08-19T15:44:11","guid":{"rendered":"https:\/\/www.europesays.com\/ai\/145022\/"},"modified":"2026-08-19T15:44:11","modified_gmt":"2026-08-19T15:44:11","slug":"harness-launches-ai-agents-that-triage-and-patch-vulnerabilities","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/ai\/145022\/","title":{"rendered":"Harness launches AI agents that triage and patch vulnerabilities"},"content":{"rendered":"

Software delivery platform provider Harness Inc.<\/a> today launched a set of artificial intelligence agents that find software vulnerabilities and write the patches.<\/p>\n

Developers approve the fixes before anything ships.\u00a0AI SAST runs a deterministic static scanner, then applies an AI layer to strip out noise. Harness said that layer cuts false positives and catches logic flaws such as missing authorization checks, which conventional tools tend to miss entirely.<\/p>\n

What survives goes to a Triage Agent, which narrows the pile to findings the software judges exploitable. A Remediation Agent drafts a fix, validates it and opens a pull request against the vulnerable function.<\/p>\n

A Zero-Day Agent watches newly disclosed flaws around the clock and flags affected systems across a customer environment, often with a validated fix ready within minutes. Virtual patching blocks exploitation in production until the code fix ships. No code changes are required for it. Customers running their own large language model scanners can also pipe those results into the triage workflow.<\/p>\n

Attackers using frontier models can move from a public disclosure to a working exploit in as little as six hours, the company said. The average vulnerability takes more than 50 days to fix. Testing by Harness found frontier models surfacing roughly 10 times more vulnerabilities than conventional scanners. Most security teams have no realistic way to work through that much output, the company argues.<\/p>\n

The release invokes \u201cMythos-class\u201d models, a nod to Claude Mythos Preview. Anthropic PBC has kept that model out of general release because of how well it finds and chains software vulnerabilities. Defenders have had access since April<\/a> through Project Glasswing.<\/p>\n

Co-founder and Chief Executive Jyoti Bansal said attackers are using the same models that help Harness customers ship software quickly. Security has to become \u201ca first-class part of the delivery pipeline itself,\u201d he said. Work currently stalls in handoffs between disconnected scanning, ticketing and deployment systems.<\/p>\n

Rahul Sood, general manager of application security at Harness, said the agents all draw on one set of reachability data. That keeps teams off findings that were never exploitable to begin with, he said. The window between discovery and a deployed fix should shrink \u201cfrom weeks to hours,\u201d he added.<\/p>\n

Harness picked up Sood in its September acquisition<\/a> of Qwiet AI. Qwiet\u2019s Code Property Graph technology underpins the new scanning work. The deal was one piece of an 18-month security buildout at the company. Harness announced a merger with application programming interface security company Traceable Inc. in February 2025<\/a>. On July 21<\/a> it shipped Agent DLC, which audits and governs AI coding agents.<\/p>\n

The new agents and virtual patching are available now to Harness customers.<\/p>\n

Harness is a venture capital-backed company that last raised $240 million at a $5.5 billion valuation in December<\/a>.<\/p>\n

Image: Harness<\/p>\n

Support our mission to keep content open and free by engaging with theCUBE community. Join theCUBE\u2019s Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities.<\/p>\n

15M+ viewers of theCUBE videos, powering conversations across AI, cloud, cybersecurity and more
\n11.4k+ theCUBE alumni \u2014 Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network<\/p>\n

SiliconANGLE Media is a recognized leader in digital media innovation, uniting breakthrough technology, strategic insights and real-time audience engagement. As the parent company of SiliconANGLE<\/a>, theCUBE Network<\/a>, theCUBE Research<\/a>, CUBE365<\/a>, theCUBE AI<\/a> and theCUBE SuperStudios \u2014 with flagship locations in Silicon Valley and the New York Stock Exchange \u2014 SiliconANGLE Media operates at the intersection of media, technology and AI.<\/p>\n

Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.<\/p>\n","protected":false},"excerpt":{"rendered":"Software delivery platform provider Harness Inc. today launched a set of artificial intelligence agents that find software vulnerabilities…\n","protected":false},"author":2,"featured_media":145023,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[71396,179,405,71397,53,8918,7537,2213,8921,1627,10608,338,71398,71399,71400,58209,71401,68662,13709,4343],"class_list":["post-145022","post","type-post","status-publish","format-standard","has-post-thumbnail","category-agentic-ai","tag-agent-dlc","tag-agentic-ai","tag-ai-agents","tag-ai-sast","tag-anthropic","tag-application-security","tag-artificial-intelligence-agents","tag-claude-mythos","tag-devsecops","tag-harness","tag-jyoti-bansal","tag-project-glasswing","tag-qwiet-ai","tag-rahul-sood","tag-shiftleft","tag-static-analysis","tag-traceable","tag-virtual-patching","tag-vulnerability-management","tag-zero-day"],"_links":{"self":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts\/145022","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/comments?post=145022"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts\/145022\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/media\/145023"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/media?parent=145022"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/categories?post=145022"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/tags?post=145022"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}