I’m excited to announce that @CapitalOne is open-sourcing VulnHunter, an advanced agentic AI security tool we built to help the entire developer ecosystem find and fix software vulnerabilities. The digital threat landscape is moving faster than human defenders can keep pace. Because modern supply chains are deeply interconnected, a single vulnerability can ripple across thousands of enterprises simultaneously. No single organization can solve this challenge alone, and stakes are only rising for security teams to fight AI-enabled threats with equally capable AI-driven defenses to protect our digital environments. We designed VulnHunter with a developer-first mindset to solve a massive industry pain point: overwhelming false positives that create friction and slow down daily workflows. VulnHunter represents a new approach through three primary technical innovations:  -Falsification Engine: It actively tries to disprove its own findings to virtually eliminate false alarms. -Attacker-First Analysis: It simulates a hacker's journey, tracing entry points to map real attack paths. -Evidence-Backed Repair: It generates the exact code changes needed to fix verified defects. I’m incredibly proud of our internal team for exemplifying Capital One’s culture of innovation and invention. I’m also appreciative of our partnership with @AnthropicAI. VulnHunter’s advanced reasoning workflow is optimized to run using the exceptional capabilities of Claude Opus 4.8 and the Claude Code environment. It’s a noteworthy milestone in our collaboration, and I can’t wait to see how we’ll continue to create state-of-the-art capabilities together. At Capital One, we hope the release of VulnHunter enables the broader tech and security community to inspect the workflow, challenge its assumptions, and contribute improvements. Collectively using and contributing to these solutions can help advance the betterment of the systems we all build and the customers who depend on us to keep their data safe. Get the details here: i.capitalone.com/JyA3kUkDu