Google Cloud unveils AI harness that finds flaws fast

Google Cloud has disclosed details of its internal Agentic Vulnerability Discovery Harness for source code review, a system Mandiant uses in security assessments and incident response work.

The framework combines multiple AI agents with human expert review to identify exploitable software flaws in large codebases. Over the past 10 months, it has been used in proactive code reviews, penetration tests, red team operations and investigations following source code theft.

Google Cloud said the most striking result came during an incident response case involving stolen corporate repositories. In that engagement, the harness found more than 100 true-positive critical vulnerabilities in two days, far faster than a manual review, the company said.

Mandiant has also applied the system in software environments containing tens of millions of lines of code. The process has generated thousands of analysis pipelines and tens of thousands of findings, according to Google Cloud.