Google Fixed 1,072 Security Bugs in Chrome Using AI Agents
PawelHuryn · x · 2026-07-31
Google's Chrome Security team used LLMs to fix 1,072 security bugs in June—more than the previous two years combined. The team detailed their AI engineering practices:
- Knowledge Base: Built a comprehensive database of all known Chrome CVEs and the entire Git history.
- Security Documentation: Used SECURITY.md files to document the security assumptions of each component.
- Critic Agent: Deployed a separate agent with its own context to review and critique code.
- Multiple Passes: Ran multiple passes over the same code, recognizing that a model might only find a specific bug on the third run.
This marks a massive shift in the software security industry, scaling vulnerability discovery and patching far beyond human limits.
More from coding & agent
- MCP Protocol Breaking Update: A Guide to Stateless Migration — lee_stott · 2026-07-31
- LangChain Founder Recommends Ecosystem Stack for Building Agent Harnesses — hwchase17 · 2026-07-31
- Chip Huyen Demos Workflow Orchestrating 1,409 Agents — hugobowne · 2026-07-31
- Agent Gave Boss Fake Link: Dev Reflects on RAG Best Practices — gogeta7124 · 2026-07-31
- DeepSeek-V4-Flash Agent Eval: Completes 3D Task for $0.07 — cedric_chee · 2026-07-31
- Chamath Predicts Agentic Code Will Reduce Software Error Rates and Security Incidents — iamKierraD · 2026-07-31