Harness launches AI agents that triage and patch vulnerabilities

Harness Inc. has introduced a set of AI agents that find software vulnerabilities and generate patches, with developers approving fixes before deployment. The agents use a deterministic static scanner followed by an AI layer to reduce false positives and catch logic flaws. A Triage Agent filters findings to those deemed exploitable, and a Remediation Agent drafts and validates fixes, opening pull requests. A Zero-Day Agent monitors new disclosures and can provide virtual patching to block exploitation in production.

The company notes that attackers using frontier models can exploit vulnerabilities in as little as six hours, while the average fix takes over 50 days. Harness acquired Qwiet AI in September to underpin the scanning technology.