{"slug": "harness-launches-ai-agents-that-triage-and-patch-vulnerabilities", "title": "Harness launches AI agents that triage and patch vulnerabilities", "summary": "Harness Inc. launched AI agents that triage and patch software vulnerabilities, using deterministic scanning plus an AI layer to cut false positives and catch logic flaws. The company said attackers using frontier models can exploit disclosures in as little as six hours, while the average vulnerability takes over 50 days to fix, and its testing found frontier models surface roughly 10 times more vulnerabilities than conventional scanners. The agents, including a Zero-Day Agent that monitors new flaws and can provide validated fixes within minutes, are available now to Harness customers.", "body_md": "### Harness launches AI agents that triage and patch vulnerabilities\n\nSoftware delivery platform provider [Harness Inc.](https://www.harness.io/) today launched a set of artificial intelligence agents that find software vulnerabilities and write the patches.\n\nDevelopers approve the fixes before anything ships. AI SAST runs a deterministic static scanner, then applies an AI layer to strip out noise. Harness said that layer cuts false positives and catches logic flaws such as missing authorization checks, which conventional tools tend to miss entirely.\n\nWhat survives goes to a Triage Agent, which narrows the pile to findings the software judges exploitable. A Remediation Agent drafts a fix, validates it and opens a pull request against the vulnerable function.\n\nA Zero-Day Agent watches newly disclosed flaws around the clock and flags affected systems across a customer environment, often with a validated fix ready within minutes. Virtual patching blocks exploitation in production until the code fix ships. No code changes are required for it. Customers running their own large language model scanners can also pipe those results into the triage workflow.\n\nAttackers using frontier models can move from a public disclosure to a working exploit in as little as six hours, the company said. The average vulnerability takes more than 50 days to fix. Testing by Harness found frontier models surfacing roughly 10 times more vulnerabilities than conventional scanners. Most security teams have no realistic way to work through that much output, the company argues.\n\nThe release invokes “Mythos-class” models, a nod to Claude Mythos Preview. Anthropic PBC has kept that model out of general release because of how well it finds and chains software vulnerabilities. Defenders have had access [since April](https://siliconangle.com/2026/04/07/anthropic-debuts-project-glasswing-initiative-will-leverage-powerful-mythos-model-reinforce-software-security/) through Project Glasswing.\n\nCo-founder and Chief Executive Jyoti Bansal said attackers are using the same models that help Harness customers ship software quickly. Security has to become “a first-class part of the delivery pipeline itself,” he said. Work currently stalls in handoffs between disconnected scanning, ticketing and deployment systems.\n\nRahul Sood, general manager of application security at Harness, said the agents all draw on one set of reachability data. That keeps teams off findings that were never exploitable to begin with, he said. The window between discovery and a deployed fix should shrink “from weeks to hours,” he added.\n\nHarness picked up Sood in its [September acquisition](https://siliconangle.com/2025/09/29/harness-acquires-qwiet-ai-bring-vulnerability-detection-devops-workflows/) of Qwiet AI. Qwiet’s Code Property Graph technology underpins the new scanning work. The deal was one piece of an 18-month security buildout at the company. Harness announced a merger with application programming interface security company Traceable Inc. in [February 2025](https://siliconangle.com/2025/02/10/harness-traceable-announce-merger-bring-api-security-ai-driven-software-delivery/). On [July 21](https://siliconangle.com/2026/07/21/harness-launches-agent-dlc-developers-deploy-ai-agents-using-familiar-processes-tools/) it shipped Agent DLC, which audits and governs AI coding agents.\n\nThe new agents and virtual patching are available now to Harness customers.\n\nHarness is a venture capital-backed company that last raised $240 million at a $5.5 billion valuation [in December](https://siliconangle.com/2025/12/11/harness-raises-240m-lead-ai-powered-devops-beyond-code-editor/).\n\n##### Image: Harness\n\n# A message from John Furrier, co-founder of SiliconANGLE:\n\nSupport our mission to keep content open and free by engaging with theCUBE community. **Join theCUBE’s Alumni Trust Network**, where technology leaders connect, share intelligence and create opportunities.\n\n**15M+ viewers of theCUBE videos**, powering conversations across AI, cloud, cybersecurity and more** 11.4k+ theCUBE alumni**— Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network\n\n### Are you an AWS customer? Support SiliconANGLE financially by buying your AWS services from our Marketplace portal page and links: [https://siliconangle.com/aws-marketplace/](https://siliconangle.com/aws-marketplace/)\n\n**About SiliconANGLE Media**\n\n[SiliconANGLE](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fsiliconangle.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=SiliconANGLE&index=9&md5=646b1b564e2259100a2b8638aab0a552),\n\n[theCUBE Network](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.thecube.net%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+Network&index=10&md5=7de2a85f95ab4a4a495cede20b8cb1da),\n\n[theCUBE Research](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fthecuberesearch.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+Research&index=11&md5=7bb33676722925eb57d588ec343e4f6f),\n\n[CUBE365](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.cube365.net%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=CUBE365&index=12&md5=d310fb35919714e66ad8d42c9c0c1bc6),\n\n[theCUBE AI](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.thecubeai.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+AI&index=13&md5=b8b98472f8071b23ebb10ab9a8dd0683)and theCUBE SuperStudios — with flagship locations in Silicon Valley and the New York Stock Exchange — SiliconANGLE Media operates at the intersection of media, technology and AI.\n\nFounded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.", "url": "https://wpnews.pro/news/harness-launches-ai-agents-that-triage-and-patch-vulnerabilities", "canonical_source": "https://siliconangle.com/2026/08/19/harness-launches-ai-agents-triage-patch-vulnerabilities/", "published_at": "2026-08-19 15:00:09+00:00", "updated_at": "2026-08-19 15:13:21.610098+00:00", "lang": "en", "topics": ["artificial-intelligence", "ai-agents", "ai-products", "ai-safety"], "entities": ["Harness Inc.", "Jyoti Bansal", "Rahul Sood", "Qwiet AI", "Anthropic PBC", "Claude Mythos Preview", "Project Glasswing", "Traceable Inc."], "alternates": {"html": "https://wpnews.pro/news/harness-launches-ai-agents-that-triage-and-patch-vulnerabilities", "markdown": "https://wpnews.pro/news/harness-launches-ai-agents-that-triage-and-patch-vulnerabilities.md", "text": "https://wpnews.pro/news/harness-launches-ai-agents-that-triage-and-patch-vulnerabilities.txt", "jsonld": "https://wpnews.pro/news/harness-launches-ai-agents-that-triage-and-patch-vulnerabilities.jsonld"}}