Chainguard has launched an AI-powered security harness that uses frontier models, including Anthropic’s restricted Claude Mythos 5.1, to find and fix exploitable vulnerabilities in application code that conventional scanners miss.

Developers can use Chainguard Harness without direct access to Mythos, but the company hasn’t disclosed which models handle vulnerability discovery for those customers.

The company says Harness has found serious vulnerabilities in codebases that had already undergone extensive security scanning, including software used in critical infrastructure. Details about the affected projects, the flaws themselves, and their remediation status remain undisclosed.

Announced Wednesday, Harness leads a four-product launch alongside Workspaces, Checks, and expanded Libraries protections, extending Chainguard’s reach beyond hardened container images and dependencies into agent execution environments and CI verification.

Anthropic has restricted Claude Mythos 5.1 access to organizations participating in Project Glasswing, leaving open which models Harness customers outside the program will use.

Harness will also be available through Anthropic’s Claude Marketplace, allowing teams to use existing Anthropic spending commitments rather than secure a separate budget.

The launches come alongside The AI Exploit Gap, a Chainguard-commissioned Wakefield Research survey of 1,300 security leaders across nine markets. More than half said their organizations knowingly leave high or critical vulnerabilities unpatched at least sometimes, with the figure reaching 66% at companies with $1 billion or more in revenue, compared with 27% at companies below $250 million.

“AI can find and chain flaws in minutes, while fixing them still moves at human speed and competes with product deadlines and uptime,” Quincy Castro, Chainguard’s chief information security officer, said in a statement.

Source link