Google Launches CodeMender AI Agent to Find, Verify, and Patch Software Flaws

Google has moved CodeMender, an AI security agent for autonomous vulnerability discovery, verification, and automated remediation, from research preview to enterprise preview. CodeMender leverages Gemini 3.5 Flash Cyber to scan multiple languages, construct and run proof-of-concept exploits in a customer-managed sandbox to reduce false positives, and produce tested code diffs for developer approval; it integrates with platforms like Wiz and is positioned as a tool for continuous, self-healing software development rather than reporting any active incident.