TLDR Tech / DevOps
Building Your Own Vulnerability Harness
Cloudflare has developed a model-agnostic "vulnerability harness" capable of scanning 128 repositories across multiple programming languages. This system utilizes various AI models at different stages—discovery and validation—to identify security bugs at scale, processing 20,799 raw findings into 7,245 actionable issues with working patches in approximately 14 hours per repository. Evolving from a 450-line security audit script over six weeks, the system uses specialized agents for reconnaissance, hunting, validation, and automated patching, while maintaining strict context controls and requiring human approval before any code enters production.
Read the full story