TLDR: Cycode has launched an advanced AI Exploitability Agent, integrated into its Application Security Posture Management (ASPM) platform, designed to accurately assess the real-world exploitability of software vulnerabilities. This innovation aims to drastically reduce the time security teams spend on triaging alerts, enabling them to prioritize and remediate critical issues up to 99% faster, especially in an era of increasing AI-generated code vulnerabilities.
San Francisco, CA – August 5, 2025 – Cycode, a leader in AI-native application security, has announced the release of its groundbreaking AI Exploitability Agent. This new capability, a significant addition to Cycode’s Application Security Posture Management (ASPM) platform, is specifically engineered to determine how truly exploitable a detected vulnerability within an application is, thereby transforming the landscape of DevSecOps.
The introduction of this AI agent comes at a critical juncture, as the proliferation of AI coding tools is leading to an unprecedented surge in software vulnerabilities. Cycode estimates that one security flaw is created for every 10,000 lines of code written, with approximately 40% of all AI-generated applications containing some form of vulnerability. This influx of alerts often overwhelms traditional security teams, making it challenging to identify and address the most pressing threats.
Devin Maguire, senior product marketing manager for Cycode, emphasized the agent’s role in streamlining security operations. ‘The AI Exploitability Agent developed by Cycode will make it simpler for DevSecOps teams to prioritize remediation efforts based on the level of risk a vulnerability represents to the organization,’ Maguire stated. This prioritization is crucial, especially as cybercriminals are increasingly leveraging AI capabilities to discover and reverse-engineer vulnerabilities.
The AI Exploitability Agent is part of Cycode’s broader suite of AI Security Teammates, which includes a Change Impact Analysis Agent for monitoring code changes and a Fix & Remediation Agent that suggests code fixes by analyzing root causes. The Exploitability Agent automates the analysis process, answering key questions such as whether a violation is genuinely exploitable, quantifying its relative risk using code-to-runtime context, and correlating data across various scans to consolidate alerts and pinpoint root causes.
According to Cycode, this new agent can fundamentally revolutionize traditional analysis and triaging. By delivering critical exploitability answers in minutes rather than days, it empowers customers to slash the Mean Time to Remediate (MTTR) critical issues by over 99%—dramatically reducing resolution time from over 10 months to a mere 3 days. This efficiency gain is vital for organizations struggling to keep pace with rapid AI-assisted development.
Lior Levy, CEO and Co-founder of Cycode, highlighted the urgency of this innovation. ‘We were already facing an overwhelming tide of security alerts,’ Levy remarked. ‘The AI coding revolution threatens to completely overwhelm traditional approaches. It’s no longer enough to just keep pace; security must take the lead, leveraging automation and AI that provides crystal-clear visibility, intelligent prioritization, and automated fixes. Cycode’s new Exploitability Agent is an essential part of our AI-native application security platform, fundamentally transforming the notoriously difficult and time-consuming process of triaging alerts and determining true exploitability.’
Also Read:
- Apiiro Unveils AutoFix AI Agent to Revolutionize Application Security and Code Remediation
- Qualys Revolutionizes Cybersecurity with Agentic AI-Powered Risk Operations Center
In addition to the AI Exploitability Agent, Cycode has also made available an AI Security Return on Investment (ROI) Calculator, designed to analyze the impact of AI on specific DevSecOps use cases. The AI Exploitability Agent debuted at Black Hat 2025, marking a significant step forward in securing the future of software development.
