--- title: VulnHunter: an open-source, agentic AI code security tool description: Capital One has open-sourced VulnHunter, an agentic AI security tool that analyzes source code from an attacker's perspective to find and remediate... canonical: https://daily.dev/posts/vulnhunter-an-open-source-agentic-ai-code-security-tool-sux4ssvhx twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: VulnHunter: an open-source, agentic AI code security tool | daily.dev og:description: Capital One has open-sourced VulnHunter, an agentic AI security tool that analyzes source code from an attacker's perspective to find and remediate... og:url: https://daily.dev/posts/vulnhunter-an-open-source-agentic-ai-code-security-tool-sux4ssvhx og:image: https://api.daily.dev/og/posts/sUx4ssvhX.png og:image:alt: VulnHunter: an open-source, agentic AI code security tool og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # VulnHunter: an open-source, agentic AI code security tool **[Hacker News](https://daily.dev/sources/hn)** · 6 min read · 2 upvotes · 0 comments ## Summary Capital One has open-sourced VulnHunter, an agentic AI security tool that analyzes source code from an attacker's perspective to find and remediate vulnerabilities. Unlike traditional scanners, it uses a forward-analysis approach starting from attacker-accessible entry points (APIs, file uploads, network messages) and traces paths through application logic. A built-in falsification engine challenges its own findings to minimize false positives before surfacing results to developers. When a vulnerability survives this challenge, the tool generates targeted code remediations with supporting evidence. Built on Claude Opus 4.8 and Claude Code, it was validated internally across thousands of Capital One repositories. The tool is available on GitHub under Apache 2.0 license. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [CISOs in a Pinch: A Security Analysis of OpenClaw](https://daily.dev/posts/cisos-in-a-pinch-a-security-analysis-of-openclaw-wq3pmvkrr) · Trend Micro · 0 upvotes · 0 comments - [Build your own vulnerability harness](https://daily.dev/posts/build-your-own-vulnerability-harness-qm0qjudbn) · Cloudflare · 3 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#claude](https://daily.dev/tags/claude), [#agentic-ai](https://daily.dev/tags/agentic-ai) [View this post on daily.dev](https://daily.dev/posts/vulnhunter-an-open-source-agentic-ai-code-security-tool-sux4ssvhx) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"VulnHunter: an open-source, agentic AI code security tool","url":"https://daily.dev/posts/vulnhunter-an-open-source-agentic-ai-code-security-tool-sux4ssvhx","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/vulnhunter-an-open-source-agentic-ai-code-security-tool-sux4ssvhx"},"datePublished":"2026-07-17T14:50:16.583Z","dateModified":"2026-07-18T22:21:11.763Z","description":"Capital One has open-sourced VulnHunter, an agentic AI security tool that analyzes source code from an attacker's perspective to find and remediate...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8f66e861672a6430909e13945b8321d0?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8f66e861672a6430909e13945b8321d0?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Hacker News","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Hacker News","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/hn","url":"https://daily.dev/sources/hn"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/vulnhunter-an-open-source-agentic-ai-code-security-tool-sux4ssvhx","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":2},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,claude,agentic-ai","timeRequired":"PT6M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Hacker News","item":"https://daily.dev/sources/hn"},{"@type":"ListItem","position":3,"name":"VulnHunter: an open-source, agentic AI code security tool"}]} ```