Google Discloses PageBreak AI Security Agent That Found 500+ XSS Bugs
According to a paper published by Google, its AI-powered security agent has uncovered more than 500 XSS vulnerabilities across its web applications since entering full operation in January. PageBreak uses Gemini models to autonomously investigate potential vulnerabilities, but reports them only after deterministic validators successfully reproduce the exploit against a running application. By…
Google has unveiled its AI-powered security agent, PageBreak, which has discovered more than 500 cross-site scripting (XSS) vulnerabilities across its web applications since its full operation began in January. The agent uses Gemini models to autonomously investigate potential vulnerabilities but only reports them after deterministic validators successfully reproduce the exploit against a running application, resulting in a near-zero false-positive rate.
PageBreak's development prioritizes deterministic validation, ensuring that every vulnerability hypothesis is tested against a live environment with a real exploit before being reported. This approach minimizes false positives and allows product teams to focus on high-confidence vulnerabilities.
Brief written by urgent.news from InfoQ's own syndicated text. Machine-written — may contain errors; check the original before relying on it.
