AnthropicSep 29, 2026
An open model wrote a Chrome exploit in 8 hours
An open-weight model turned a public Chrome patch into a working exploit in 8 hours, for $20.40.
Anthropic research
- Vulnerability Management
- Code Security
- Cloud Security
- Threat Hunting
The agent harness for cybersecurity
Automate workflows, investigate vulnerabilities, track down owners, and remediate fast — at scale, with zero engineering friction.
Problem
Adversaries are getting faster
AI turns a CVE into a working exploit in hours, and anyone can use it. Are you ready for the vulns of the future?
JFrog ArtifactoryAug 28, 2026
From fix to 400K attacks a day in 5 days
One request gave attackers admin on the server that ships your code. Two weeks on, half hadn't patched.
Fastly- Apache TomcatCVE-2026-34486Aug 4
- Fastjson 1.xCVE-2026-16723Jul 21
- wp2shellCVE-2026-63030Jul 20
- Windows ADFSCVE-2026-56155Jul 14
- GhostLockCVE-2026-43499Jul 9
- FragnesiaCVE-2026-46300May 13
- Shai-Hulud wormCVE-2026-45321May 11
- Copy FailCVE-2026-31431Apr 29
- axiosaxios@1.14.1Mar 31
- LangflowCVE-2026-33017Mar 25
- LiteLLMlitellm@1.82.8Mar 24
- Trivy Actiontrivy@0.69.4Mar 19
- Windows RDSCVE-2026-21533Feb 10
- Windows DWMCVE-2026-21519Feb 10
- Windows DWMCVE-2026-20805Jan 13
AnthropicSep 29, 2026
An open model wrote a Chrome exploit in 8 hours
An open-weight model turned a public Chrome patch into a working exploit in 8 hours, for $20.40.
Anthropic researchJFrog ArtifactoryAug 28, 2026
From fix to 400K attacks a day in 5 days
One request gave attackers admin on the server that ships your code. Two weeks on, half hadn't patched.
FastlySolution
Solve the hardest problems in cybersecurity using frontier intelligence
SubagentsContextAgent Harness
Agents- Exploitability
- Ownership
- Root cause
- Red team simulation
- PR creation
- WAF mitigation
- Human follow-ups
- Code to cloud
- Business context
- Report writing
- Cloud: AWS, Google Cloud, Microsoft Azure
- Code: GitHub, GitLab, Bitbucket
- Infrastructure: Kubernetes, Docker, Terraform
- Scanners: Wiz, Rapid7, Qualys
- Controls: Upwind, Cloudflare, CrowdStrike
- Tasks: Jira, ServiceNow, Linear
Subagents
- Exploitability
- Ownership
- Root cause
- Red team simulation
- PR creation
- WAF mitigation
- Human follow-ups
- Code to cloud
- Business context
- Report writing
Context
- Cloud: AWS, Google Cloud, Microsoft Azure
- Code: GitHub, GitLab, Bitbucket
- Infrastructure: Kubernetes, Docker, Terraform
- Scanners: Wiz, Rapid7, Qualys
- Controls: Upwind, Cloudflare, CrowdStrike
- Tasks: Jira, ServiceNow, Linear
- PartnerHyper-tailored agents built for youA dedicated Rival engineer tailors agents to your environment.
- Agent StoreReady-made agentsAgents you can deploy today. Tailored on installation.
- GrowCustomize or build your ownUse our harness to execute any complex workflow and scale your team.
Use cases
Our top use cases
Rival has run 13M+ agent runs to keep our clients secure against AI-native attacks.
Cut through the noise
94.6% reduction in findings
AssetCVESourceExploitabilityBusiness contextImpactControls
payments-apiCVE-2025-55182Rival SCA
hr-portalCVE-2024-38819Wiz
ci-runner-03CVE-2024-3094Qualys
auth-serviceCVE-2025-29927Rival Code
orders-lambdaCVE-2024-21508GitHub
marketing-siteCVE-2024-4577Pentest
billing-dbCVE-2024-10979Wiz
legacy-erpCVE-2021-44228Rival SCA
0-day rapid response
from 2–4 days to minutes
Many more
- Monthly
Agentic scanning
AppSecCloudSecDeep scan with cloud, code, and business context - Weekly
Asset tagging
Vuln MgmtReviews every asset and tags it automatically - Exploitable finding in a legacy app
Alternative remediation
Vuln MgmtPlans a fix that removes the risk without upgrading libraries - Pull requests, image push
Block exploitable issues in CI/CD
AppSecScans dependencies, code and secrets, and blocks only what's exploitable - Exploitable finding on web app
WAF mitigation
ThreatsAnalyse whether a WAF is blocking exploitation, and adjust it - New repository or code change
Map code to cloud
AppSecCloudSecConnect codebases to servers and resources they are deployed or interact with. - Vulnerability remediation
Find vulnerability owners
Vuln MgmtFinds who owns a vulnerability, weighing its root cause, the team structure, and past Memories
Autonomous remediation
from 3–4 weeks to minutes
DailyRun #7526
- Gather findings
- Root cause
- Remediation plan
- PR creation
- Human followup
- Remediation tracking
0 of 6 done
Findingscheckout-web:3.8.1
5 critical findings
- CriticalCVE-2025-55182next 15.2.2Rival SCA10.0
- CriticalCVE-2025-29927next 15.2.2Rival SCA9.1
- CriticalSQL injection/api/orders/[id]Rival Code
- CriticalSQL injection/api/refunds/[id]Rival Code
- CriticalSQL injection/api/receipts/[id]Rival Code
