CodeMender (Preview)

Google's security agent that finds vulnerabilities in a codebase, proves they are exploitable, and writes fixes, for teams on Google Cloud.

Scans a codebase, then tries to exploit each vulnerability it finds inside an isolated sandbox, so what reaches the report is confirmed rather than suspected
Writes and tests a fix for each confirmed vulnerability, with a second model checking that the change does not break how the code behaves
Covers C and C++, Go, Java, Python, Ruby, Rust, and TypeScript
Available in preview through the Gemini Enterprise Agent Platform, or inside AI Threat Defense where Wiz orchestrates it, and connects to CI/CD pipelines, VS Code, and Antigravity
The version built on Gemini 3.5 Flash Cyber is limited to a small set of governments and trusted partners for now, with wider access planned

getting a list of vulnerabilities that have already been confirmed as exploitable instead of a pile of maybes to triage

a security backlog has grown past what the engineering team can work through by hand

security and platform engineering teams already running on Google Cloud

Staying informed is great. Staying ahead is better.

Pick a topic and leave with something you created.

Get new module drops and weekly AI strategy.