Google has launched a preview version of CodeMender, an AI agent designed to identify security vulnerabilities in code, confirm whether they can be exploited, and automatically generate fixes for developers to review and apply. The tool is positioned as a defensive response to the growing use of AI by attackers to accelerate vulnerability discovery and exploitation.
The company frames CodeMender as necessary infrastructure for security teams facing adversaries who have already adopted AI to speed up their offensive operations. By automating the vulnerability remediation workflow, Google aims to help defenders operate at the same pace as attackers, rather than falling behind while manually reviewing and patching security flaws.
CodeMender goes beyond traditional static analysis tools by not only detecting potential vulnerabilities but also validating whether they are actually exploitable in practice. Once a genuine security flaw is confirmed, the system generates proposed patches that developers can review before implementation. This approach combines automated detection with human oversight, allowing security teams to maintain control while benefiting from AI-driven speed.
The tool represents a shift from passive security scanning, where vulnerabilities are simply flagged for later manual review, to active automated remediation that produces actionable fixes. Google suggests this capability could help organizations reduce their exposure to zero-day vulnerabilities by accelerating the time between discovery and patch deployment.
CodeMender is currently available in preview, allowing development and security teams to test its capabilities in their workflows. Organizations interested in automated vulnerability remediation can evaluate whether the tool fits their code review processes and security requirements. As with any automated security tool, teams should establish clear procedures for reviewing AI-generated patches before deploying them to production systems.
Source: https://www.helpnetsecurity.com/2026/07/24/google-codemender-ai-agent-code-security/