Harness has introduced new application security capabilities, including AI SAST, agentic triage and remediation, a dedicated Zero-Day Agent, and virtual patching, designed to help enterprises identify, prioritize, and address software vulnerabilities within the delivery pipeline. The company said attackers are increasingly using frontier AI models to accelerate vulnerability discovery and exploitation, with some attacks moving from disclosure to first exploit in as little as six hours, while vulnerabilities take more than 50 days to fix on average. Harness aims to close this gap by integrating security processes directly into software delivery. The new capabilities include AI-assisted SAST, LLM scan orchestration, automated finding triage, remediation through validated pull requests, continuous zero-day monitoring, and virtual patching to protect production systems while permanent fixes are developed.
Also Read: F5 Introduces AI Gateway to Strengthen Enterprise AI Governance and Cost Control
“We’re at a point where the same AI models helping our customers ship software faster are also what attackers are using to find and exploit vulnerabilities faster,” said Rahul Sood, General Manager of Application Security at Harness. “The only way to close that gap is to make security a first-class part of the delivery pipeline itself, so scanning, prioritization, remediation, and deployment all move together instead of getting stuck in handoffs between disconnected systems. That’s the shift we built these agents around, and it’s the same shift every enterprise is going to have to make to stay ahead.” “For customers, this means the distance between ‘we found something’ and ‘it’s fixed and deployed’ shrinks from weeks to hours, without adding headcount or a new tool to manage,” Sood added.