TLDR: Secure Code Warrior has launched a beta program for its new Trust Agent: AI, an industry-first solution designed to provide comprehensive security traceability, visibility, and governance over developers’ use of AI coding tools. This innovation aims to address the growing complexities and risks introduced by AI-generated code within the software development lifecycle, offering deep insights into vulnerabilities and enabling proactive risk mitigation.
SYDNEY – Secure Code Warrior, a recognized leader in Developer Risk Management (DRM), announced on September 24, 2025, the debut of a beta program for its significantly expanded AI capabilities, collectively known as Trust Agent: AI. This new offering marks an industry first, providing Chief Information Security Officers (CISOs) with critical security traceability, visibility, and governance over how developers utilize AI coding tools.
The Trust Agent: AI platform is engineered to offer unparalleled insight into the impact of AI development tools on code risk throughout the software development lifecycle (SDLC). It achieves this by integrating a unique combination of data signals, including AI coding tool usage, vulnerability data, code commit data, and developers’ secure coding skills. This holistic approach is crucial in an era where the rapid adoption of AI-powered coding assistants can introduce new and often unseen vulnerabilities.
According to Pieter Danhieux, CEO of Secure Code Warrior, “AI allows developers to generate code at a speed we’ve never seen before.” This accelerated development, while boosting productivity, simultaneously amplifies the potential for introducing insecure or biased coding outcomes, making robust security measures more vital than ever.
One of the primary challenges Trust Agent: AI addresses is the current lack of visibility for security leaders regarding which AI coding tools and underlying Large Language Models (LLMs) developers are employing. It also provides clarity on the volume of application code generated by AI and whether developers possess the necessary skills to identify and remediate vulnerabilities within this AI-produced code.
The solution is uniquely positioned as the first of its kind to meticulously evaluate the intricate relationship between the developer, the AI models they use (including the specific vulnerabilities these models might introduce), and the actual code repository where AI-generated code is committed. This deep correlation enables organizations to rapidly modernize their AI-augmented security programs to withstand both existing and emerging threats.
Key features of Trust Agent: AI include integrated governance at scale through:
Identification of Unapproved LLMs: Providing visibility into unsanctioned LLMs and the specific vulnerabilities they introduce.
Flexible Policy Controls: Enabling organizations to log, warn, or block pull requests from developers using unsanctioned tools or those with insufficient secure coding knowledge.
Output Analysis: Surveying the quantity of AI-generated code and its distribution across various repositories.
Also Read:
- Obsidian Security Introduces Real-Time AI Agent Defense for SaaS Environments
- Cloudflare Launches AI Confidence Scorecards to Bolster Internet Security
While the beta program for Trust Agent: AI is currently available, Secure Code Warrior anticipates general availability for the solution in 2026. This strategic launch underscores the company’s commitment to empowering secure development practices in an increasingly AI-driven software landscape.
