DARPA selected Xint to use AI to find vulnerabilities in military messaging apps, with code and binary analysis technology.

LLMs have made bug discovery nearly a commodity capability. What was groundbreaking a year ago is now standard, and security teams are finding more true positive vulnerabilities than they can realisti...

The actual penetration points of AI agent incidents are not the models but already known authentication, authorization, and input validation. | AI for Security…

Any app on your Pixel can turn the phone off. We found it in a driver binary, and the part that should bother you is how long it took. | Vulnerability Researc…

Why the autonomy of uncontrolled AI agents is becoming a new security threat and what changes are needed for defenders in the context of the Hugging Face intru…

Zero data retention (ZDR) policies for LLMs in AppSec are not the default, but here's why they belong at the top of your AI procurement checklist. | Product

Bug discovery has become nearly commoditized by AI but that has actually increased the need for a platform to go from discovery to validation to remediation |…

We don’t know the FP rate for the latest frontier models when it comes to AppSec. We share ours and how we arrived at it. | Product, AI for Security

What Al-generated apps get wrong: a vulnerability study across models, vendors, languages, and a real-world app

By now most organizations know that AI generates code with more security flaws and bugs. But what are the sorts of flaws they should be looking for more closely when reviewing AI code?

What makes Xint different from XBOW | Product, AI for Security, Competitive Comparison

YouTube video by Medusa

Enterprises are facing a critical cyber asymmetry issue as AI models’ offensive and defensive capability gaps grow.

LLMs uncover more bugs than teams can patch. Vendors are selling auto-remediation as a cure, but real world results demonstrate the need to keep security engin…

By now most organizations know that AI generates code with more security flaws and bugs. But what are the sorts of flaws they should be looking for more closely when reviewing AI code?

Juno Im, an offensive security researcher at Theori and Xint whose team has won at DEF CON, Pwn2Own and DARPA's AIxCC, told Lets Data Science that the first thing he tries against an application with ...

YouTube video by DEFCONConference

AI coding agents boost code output by 180% but shipping rises only 30%, MIT finds. Why private data access beats benchmark scores as the real AI investment moat.

Woori Financial Group resolves response gaps at 24/7 online customer touchpoints through Xint’s continuous monitoring. | News, Case Study

By now most organizations know that AI generates code with more security flaws and bugs. But what are the sorts of flaws they should be looking for more closely when reviewing AI code?

This is an overview of the two vulnerabilities uncovered by Xint Code impacting Apple devices running iOS, macOS, and iPad OS | Vulnerability Research, Open S…

Winning at benchmark leaderboards is not the same as securing your applications in the real world. This is how to tell the difference.

How Xint can act as your central findings management platform to rationalize findings coming from various sources. | Product

How Xint can act as your central findings management platform to rationalize findings coming from various sources. | Product

What Al-generated apps get wrong: a vulnerability study across models, vendors, languages, and a real-world app

A study of 28 AI-built apps maps the top AI code vulnerabilities, from missing rate limits to hardcoded secrets and IDOR at scale.

New research finds that modern AI coding models frequently generate insecure code that exposes AI-generated applications to denial-of-service attacks, hardcoded secrets and authorization failures.

What Al-generated apps get wrong: a vulnerability study across models, vendors, languages, and a real-world app

This is an overview of the three high-severity vulnerabilities uncovered by Xint Code in Android which have now been patched by Google Devices | Vulnerability…

Findings are not enough: Vulnerability Detection & Response and Vulnerability Evaluation & Reporting are now required to obtain or maintain FedRAMP Certificati…

Xint Pulse offers one-time scans of web applications powered by the full award-winning capabilities of the Xint enterprise platform | Product, News, AI for Sec…

Findings are not enough: Vulnerability Detection & Response and Vulnerability Evaluation & Reporting are now required to obtain or maintain FedRAMP Certificati…

Off-by-One is Singapore's annual cybersecurity conference for the offensive security community. Two days of deeply technical talks covering vulnerability research, reverse engineering, exploit develop...

Everyone is claiming AI in AppSec, but there are meaningful differences in how AI is used, leading to fundamentally differences in exposure | AI for Security,…

Autonomous AI security tools can cause as much damage as they prevent if harnessed incorrectly. This is how Xint delivers best-in-class results without comprom…