Capital One releases VulnHunter, an open-source AI tool that finds software flaws before hackers do

Capital One released VulnHunter, an open-source AI tool that scans source code for exploitable flaws, models how attackers could reach them, and suggests targeted fixes. The tool uses attacker-first analysis and a falsification engine to reduce false positives before findings reach developers.

The release signals how major enterprises are turning offensive AI techniques into defensive software engineering workflows. If effective, tools like VulnHunter could shift vulnerability management toward pre-production exploit validation rather than post-hoc scanning and alert triage.