{
  "id": 1962618,
  "title": "Harness Adds AI Agents to Automate DevSecOps Workflows at Machine Speed",
  "url": "https://urgent.news/2026/08/19/harness-adds-ai-agents-to-automate-devsecops-workflows-at-machine",
  "topic": "ai",
  "section": "AI",
  "published": "2026-08-19T15:00:30.000Z",
  "source": {
    "name": "DevOps.com",
    "slug": "devops-com",
    "url": "https://devops.com/harness-adds-ai-agents-to-automate-devsecops-workflows-at-machine-speed/"
  },
  "original_language": "en",
  "account": "Harness has incorporated artificial intelligence (AI) agents and a virtual patching capability into its suite of tools to streamline DevSecOps workflows, addressing the rapidly escalating number of vulnerabilities discovered in code. The AI agents include a SAST tool enhancement and triage agents that prioritize remediation efforts based on exploitability, generate a fix, and open a pull request for developer approval. DevSecOps teams may also integrate additional AI scanners into their pipelines. Additionally, a Zero-Day Agent continuously monitors threat intelligence feeds for zero-day vulnerabilities, swiftly identifying affected pipelines and artifacts and generating a validated fix within minutes. Harness general manager Rahul Sood emphasized that these enhancements enable DevSecOps teams to respond \"at machine speed,\" a critical aspect given the potential for advanced AI models to quickly uncover thousands of vulnerabilities in applications, thereby allowing cybercriminals to exploit them in a short span of hours. Many DevSecOps teams are also underestimating the extent to which their applications could become collateral damage in AI-driven cyberattacks against other organizations, noted Sood. Sood explained that the challenge lies in the high number of false positives generated by AI tools, which Soot's team addressed by combining AI's probabilistic capabilities with a deterministic platform to validate vulnerability exploitability. This approach reduces AI tokens consumption during code scanning. Futurum Group's Mitch Ashley highlighted that DevSecOps teams are overwhelmed by the pace of vulnerability findings and cannot act fast enough. Harness integrates triage and remediation directly into the pipeline, ensuring fixes travel with the release. Ashley pointed out that the machine-speed generation model necessitates control over the code creation process. While the immediate challenge for DevSecOps teams may be prioritizing which applications to fix first amidst the looming AI-enabled cyberattacks, the long-term solution could be an improvement in overall application security as DevSecOps teams address long-standing technical debt issues.",
  "summary": "Harness today added multiple artificial intelligence (AI) agents and a virtual patching capability to its portfolio to automate DevSecOps workflows at a time when the number of vulnerabilities being discovered in code continues to exponentially increase. The AI agents include one that has been added to the static application security testing (SAST) tool that Harness […]",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}