Economic Zero: The Vulnerability Nobody Can Afford to Find

AI discovery turns vulnerability hunting into a purchasing decision. The budget runs out at the part that protects you. “Software will always have vulnerabilities you haven’t found” has held as a working truth for as long as anyone in security has had a job. Security programs took the assumption as a foundation: triage, rank, accept […]

Your Agent Produced the Right Answer. It Still Did the Wrong Thing.

Introducing PolicyEval, the open-source library that scores AI agents against their policy, not just their output. The first two posts in the series (#1, #2) landed on something uncomfortable. AI coding assistants ship vulnerability patches that compile, pass tests, and still break production. Roughly one in five. The fix wasn’t a smarter model – it […]

The State of Remediation: Why Security Backlogs Keep Growing

In the ever-evolving world of cybersecurity, organizations are facing an overwhelming challenge: the growing backlog of unresolved security findings. Despite advances in detection technologies, the gap between identifying security findings and remediating them continues to widen. Security Findings? Let’s define what we mean by Security Findings. Sometimes also referred to as vulnerabilities, these security findings […]