DeepSource’s new autonomous AI agents promise to scan, fix code security vulnerabilities
Summary
In five years, most forward-thinking organizations will run with automation and AI at their core with agents, large language models (LLMs), predictive analytics and seamless Application Programming Interfaces (APIs). First, a False-positive Triage Agent, based on the repository’s context, its own memory, and the real-world threat intelligence, will decide if security issues found in the code are valid or not. The company said that the new SCA product continuously monitors and fixes the open-source supply chain’s vulnerabilities, eliminating countless hours of manual work for AppSec teams. In February 2025, DeepSource released Globstar, an open-source project bringing the most cutting-edge code security tooling to the AppSec community, with no restrictions on commercial usage. The company works with startups, enterprises and organizations including Babbel, Ancestry.com and NASA, to help them secure a business’ development lifecycle via static code analysis and AI.