Vulnerability Discovery

Cloudflare open-sources a repo skill that automates security audits with isolated AI agents

Cloudflare released Security-Audit-Skill, a coding-agent tool that runs a six-phase security audit: mapping a codebase's architecture and attack surface, assigning isolated 'hunter' agents to search for vulnerabilities against a coverage ledger, validating candidates with skeptical verifier agents, and producing structured reports categorized as confirmed, needs_validation, or rejected. It served as the original single-repo prototype that Cloudflare later expanded into its larger, fleet-wide vulnerability discovery harness.

github.com · 2026-09-17

Security industry's 'hacker identity' culture undermines systemic defense work

An essay contrasts two mindsets in security engineering: those who treat security as a personal identity built around cleverness and outsider status, versus those focused on systemic, structural defense work. The piece argues that the hacker ethos of prizing surprising vulnerability discoveries, while culturally dominant and rewarded at conferences and in careers, biases the field toward reactive discovery rather than durable prevention.

dadrian.io · 2026-09-09