Cycode Adds AI Tools and Runtime Protections for Development Security

Cycode has expanded its Application Security Posture Management (ASPM) platform with a suite of new features aimed at helping development teams better manage and mitigate software vulnerabilities, reports SiliconAngle. The enhancements are designed to improve how developers identify and address security issues across proprietary code, open-source components, and configuration scripts before software reaches production.

Central to this update is the introduction of AI Teammates—automated agents that assist with common cybersecurity tasks. Among them, the Change Impact Analysis Agent flags potential risks introduced by new code changes, while the Risk Intelligence Graph Agent allows developers to search for vulnerabilities using natural language queries. These capabilities are powered by Cycode’s internal data management system, RIG, which ties vulnerabilities to the relevant teams responsible for resolving them.

The new features also include the Exploitability Agent, which evaluates whether discovered vulnerabilities can be practically exploited, helping teams prioritize what needs fixing. Another tool, the Fix & Remediation Agent, offers actionable suggestions for securing code, streamlining the remediation process without taking developers away from their core tasks.

In parallel, Cycode has upgraded its CI/MON tool, which protects CI/CD pipelines, with a new runtime memory protection feature. This enhancement uses eBPF technology to block unauthorized memory access during the build phase, reducing the risk of malware interference. The memory protection capability is now available, with the AI agents set to roll out later this month.