Cloud.Google Google Launches CodeMender to Automate Code Vulnerability Remediation
Article Content
- •CodeMender automates code vulnerability scanning and remediation, reducing manual bottlenecks.
- •The tool integrates with Google Cloud's Gemini platform and supports multiple AI models.
- •Early users report significant improvements in identifying and fixing critical vulnerabilities.
On July 21, 2026, Google announced the preview release of CodeMender, a managed AI security agent designed to identify and remediate software vulnerabilities. Integrated into the Gemini Enterprise Agent Platform and AI Threat Defense, CodeMender leverages advanced AI models to automate code scanning and remediation, significantly reducing the time required to address vulnerabilities. It can execute proof-of-concept exploits to verify the exploitability of vulnerabilities and prioritize fixes based on risk. This tool aims to enhance the security lifecycle by transitioning from manual processes to automated solutions, thus maintaining development velocity. Early adopters like Salesforce and Robinhood reported improved vulnerability detection and remediation outcomes. CodeMender is expected to support third-party models later in 2026, broadening its capabilities.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (8)
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host… 
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…