Cognition 发布 Devin Security Swarm,自动验证漏洞并提交修复 PR
Cognition 发布 Devin Security Swarm,由并行智能体分段排查代码库,组合出完整攻击路径并在隔离沙箱中复现验证可利用性,确认后自动编写补丁并提交 PR 供审查。官方称其在 50 个真实漏洞基准上比最接近的同类方案多发现漏洞且成本低 30%,并独有发现 PHP 模板注入沙箱绕过等三个关键漏洞。该产品即日起可用,支持从威胁模型文档生成扫描配置、按日/周/自定义计划扫描,首次全量扫描后仅处理变更代码。
, read our blog post on the Agentic MapReduce architecture. Performance We evaluated Devin Security Swarm on a benchmark of 50 real-world vulnerabilities, each tied to a published GitHub Security Advisory (GHSA) across repositories in Go, Python, JavaScript, Rust, Ruby, C , Java, Swift, PHP, Elixir, Erlang, C, Kotlin, and Dart. Only Devin found three critical vulnerabilities that other tools missed: a PHP sandbox bypass via template injection, an argument injection through metadata value parsing
匹配字段正文










