Story perspectives

Google's CodeMender Fixes 72 Vulnerabilities, Boosts AI Security

10/7/2025

Summary

Story summary

Google introduces CodeMender, an Artificial Intelligence (AI) agent that autonomously finds and fixes software vulnerabilities.
In six months, CodeMender delivered 72 fixes to projects, codebases up to 4.5 million lines, with Gemini models for root cause analysis.
Google launched Artificial Intelligence (AI) Vulnerability Reward Program, awarding over $430,000, and updated the Secure AI Framework for autonomous AI risk management.

History

Historical Context

In 2018, Google expanded its Vulnerability Reward Program, offering over $430,000 to researchers for identifying software vulnerabilities, reflecting heightened cybersecurity concerns following the 2017 Equifax breach that exposed 147 million records. This initiative aligns with broader industry trends, including the rise of bug bounty programs, which incentivize ethical hackers to enhance software security and mitigate risks associated with evolving cyber threats.

1 of 2

Story summary

Google introduces CodeMender, an Artificial Intelligence (AI) agent that autonomously finds and fixes software vulnerabilities.
In six months, CodeMender delivered 72 fixes to projects, codebases up to 4.5 million lines, with Gemini models for root cause analysis.
Google launched Artificial Intelligence (AI) Vulnerability Reward Program, awarding over $430,000, and updated the Secure AI Framework for autonomous AI risk management.

1 / 2