Cognition has introduced the Devin Security Vulnerability Remediation Program, a new initiative designed to help organizations clear their vulnerability backlogs and establish continuous remediation. The program utilizes Cognition’s forward-deployed engineering team and Devin, an AI software engineer, to find, validate, and fix vulnerabilities.
What Shipped
The Devin Security Vulnerability Remediation Program is built around two pillars: clearing today’s vulnerability backlog and establishing ongoing discovery and remediation. In the first phase, Devin resolves known vulnerabilities at scale by ingesting scanner reports, shipping fixes as PRs, and validating each one. In the second phase, Devin Security Swarm is set up to continuously discover logic flaws, insecure patterns, and chainable issues that traditional scanners miss.
Implications for Builders
The program allows organizations to shift from reactive to proactive security, closing gaps that scanners miss and returning engineering capacity. Devin integrates with existing scanners, including Snyk, SonarQube, and Checkmarx, and creates PRs to validate and remediate threats.
Caveats
The program is available to enterprise customers deploying Devin Cloud at meaningful scale who meet the program’s technical and engagement requirements. Existing customers who meet the criteria can also enroll.
Sources
Devin Security Vulnerability Remediation Program *Fan coverage from Devin Central — not an official Cognition announcement. Devin is a trademark of Cognition.