AGENTPROOF
DEFENSE AGENT

The Defense Agent fixes the security problems the Attack Agent finds. It changes the code in your repository, then repeats the original attack to check that the problem is gone.

The Defense Agent changes your code, then runs the same attack to confirm the fix.

EXAMPLE FINDINGCustomer can open another customer's invoice

FIX

- const invoice = await getInvoice(id);
+ const invoice = await getInvoice(id, user.id);
+ if (!invoice) return notFound();

RETEST

GET /api/invoices/1043
404 Not Found. Fixed.

The Defense Agent writes the change in your repository. A problem is only marked fixed when the original attack fails.

Pick one of three ways for fixes to reach your app.

PULL REQUEST: Your team reviews every change before it merges.
AUTO MERGE: Changes merge only after your required checks pass.
DIRECT APPLY: Changes go straight to your running app.

The report says which one happened. An open pull request does not mean the fix is live.

Every fix and report is shared with your whole team.

Fixes and reports go to your dashboard, email, and Slack. Invite your whole team at no extra cost. Reports stay in your account for as long as you have it.

See plans

The animation above is a simulation. The Defense Agent is in development.