Research · curated 25 Aug 2026
Staying Ahead of Adversarial AI Through Agentic Source Code Review | Google Cloud Blog
First reported google.com
Coverage timeline
Single-source research — first reported, latest, and curated coincide.
Why it matters
AVDH illustrates how agentic AI accelerates vulnerability discovery at machine speed, a capability defenders must adopt because adversaries are deploying the same AI-driven techniques against exposed source code.
Mandiant (Google Cloud) describes its Agentic Vulnerability Discovery Harness (AVDH), a multi-agent orchestration framework built on Google's Agent Development Kit that uses Gemini plus human expert-driven validation to find exploitable vulnerabilities in source code during proactive reviews, pentests, red-team ops, and incident response. Over 10 months it reportedly analyzed tens of millions of lines of code, generated tens of thousands of findings, and led to 12 assigned CVEs (e.g., CVE-2026-13242, CVE-2026-55803), including discovering 100+ critical bugs in stolen repositories in two days.