Topic starter
02/08/2026 12:18 pm
TL;DR: Google DeepMind’s CodeMender and OpenAI’s Aardvark show how agentic AI is moving into AppSec automation, with repository-wide scanning, exploitability validation, and patch proposal workflows, according to Checkmarx. The real governance question is whether these tools reduce remediation friction without creating new trust, validation, and runtime risk gaps in developer pipelines.
Editorial analysis by NHI Mgmt Group, based on content published by Checkmarx: “Codemender, Aardvark, and the Rise of Agentic AppSec: What Developers Need to Know”.
Key questions
Q: What breaks when AI AppSec agents are allowed to approve their own fixes?
A: Control quality breaks first, then code integrity.
Q: Why do autonomous AI agents create new AppSec risk in CI/CD workflows?
A: Autonomous agents compress code creation, testing, dependency selection, and execution into a single machine-driven sequence, so a bad instruction or unsafe dependency choice can propagate before a human review happens.
Q: How do teams know whether AI-generated patches are actually safe?
A: They need independent validation that checks for exploitability, regression, and build integrity before a patch reaches merge or deployment.
Practitioner guidance
- Define agent permission boundaries Limit AppSec agents to the minimum repository, CI, and ticketing permissions needed for their task.
- Require independent patch validation Make every generated fix pass human review or an equivalent independent validation stage before it can enter a protected branch or release pipeline.
- Log agent actions as security events Record code reads, patch proposals, sandbox runs, and workflow interactions as auditable security events.
Bottom line: AI AppSec agents are moving security decisions closer to the developer workflow, but their outputs still need governance because machine-generated patches can be wrong or incomplete.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
02/08/2026 1:19 pm
Agentic AppSec is becoming a governance problem, not just a tooling upgrade. Once AI agents can scan repositories, validate exploitability, and propose fixes, they are participating in control decisions that used to belong to humans. That means security teams need to govern authorisation, review, and rollback paths around the agent itself, not just the code it touches. The practitioner takeaway is that agent permissions now belong in the same conversation as SDLC control ownership.
A few things that frame the scale:
- 67% of organisations still rely heavily on static credentials despite the risks they pose to agentic AI deployments, according to the 2026 Infrastructure Identity Survey.
- Gartner predicts that by the end of 2026, 40% of enterprise apps will feature task-specific AI agents.
A question worth separating out:
Q: Should organisations treat agentic security tools like automation or like delegated operators?
A: They should treat them as delegated operators. That framing forces teams to define authority, constrain credentials, and set review obligations, instead of assuming a tool is safe simply because it is acting inside a security workflow.
👉 Read our full editorial: AI AppSec agents are shifting security left, but gaps remain