Harness launches AI agents that triage and patch vulnerabilities

Software delivery platform provider Harness Inc. today launched a set of artificial intelligence agents that find software vulnerabilities and write the patches.

Developers approve the fixes before anything ships. AI SAST runs a deterministic static scanner, then applies an AI layer to strip out noise. Harness said that layer cuts false positives and catches logic flaws such as missing authorization checks, which conventional tools tend to miss entirely.

What survives goes to a Triage Agent, which narrows the pile to findings the software judges exploitable. A Remediation Agent drafts a fix, validates it and opens a pull request against the vulnerable function.

A Zero-Day Agent watches newly disclosed flaws around the clock and flags affected systems across a customer environment, often with a validated fix ready within minutes. Virtual patching blocks exploitation in production until the code fix ships. No code changes are required for it. Customers running their own large language model scanners can also pipe those results into the triage workflow.

Attackers using frontier models can move from a public disclosure to a working exploit in as little as six hours, the company said. The average vulnerability takes more than 50 days to fix. Testing by Harness found frontier models surfacing roughly 10 times more vulnerabilities than conventional scanners. Most security teams have no realistic way to work through that much output, the company argues.