Source
Staying Ahead of Adversarial AI Through Agentic Source Code Review
Mandiant developed the Agentic Vulnerability Discovery Harness (AVDH), an internal tool using AI agents and human expertise to find software vulnerabilities. The company is sharing the architecture to help network defenders implement similar automated code review processes.
Why it matters
As attackers use AI to exploit stolen source code quickly, defenders need automation to identify and patch flaws before they are exploited. This reduces the risk of data theft and extortion for organizations with exposed repositories.
The details
- AVDH discovered over 100 critical vulnerabilities in two days during one investigation.
- The tool contributed to 12 assigned CVEs, including CVE-2026-13242 and CVE-2026-55803.
- Human experts manually verify AI findings using Proof-of-Concept code before formal disclosure.
Show entities and relationshipsHide entities and relationships
In this article
Key connections
Mandiant owns Agentic Vulnerability Discovery Harness (AVDH)
Mandiant built and uses AVDH to analyze source code and discover vulnerabilities.
Google owns Gemini Flash Lite
Gemini Flash Lite is a Google model used within AVDH's Discovery agents.
Agentic Vulnerability Discovery Harness (AVDH) uses ADK
AVDH is built on the Google Agent Development Kit for orchestrating its agents.
Agentic Vulnerability Discovery Harness (AVDH) uses Gemini Flash Lite
AVDH's Discovery agents use Gemini Flash Lite to process code at scale.
Agentic Vulnerability Discovery Harness (AVDH) is related to Google Antigravity
AVDH's agentic orchestration approach aligns with the capabilities available in Google Antigravity.
Agentic Vulnerability Discovery Harness (AVDH) is related to CodeMender
AVDH can be used alongside CodeMender's ongoing scanning to create a two-layered defense strategy.
Show 2 more connectionsShow fewer connections
Google AI Threat Defense uses CodeMender
Google AI Threat Defense includes CodeMender's code scanning and remediation capabilities.
Agentic Vulnerability Discovery Harness (AVDH) is built with Large Language Models
AVDH orchestrates large language model agents in a deterministic, sequential pipeline.
Get the weekly recap
The stories like this one, picked and explained — once a week, straight to your inbox.