AI is writing code faster than any security team can review it. What used to be a manageable backlog of static application security testing (SAST) vulnerabilities is now an overwhelming list that has become difficult to parse. Expecting developers to manually research and fix each one isn't a process, it's a bottleneck. The answer isn't more human effort. It's an autonomous pipeline. Agentic SAST Vulnerability Resolution within GitLab Duo Agent Platform is built for that exact problem.

Now generally available, Agentic SAST Vulnerability Resolution automatically generates ready-to-merge code fixes to remediate SAST vulnerabilities. With this capability:

Developers stay in flow

Vulnerabilities get resolved before they reach production

AppSec teams spend less time on triage and chasing down developers to close the loop

Agentic SAST Vulnerability Resolution is the future of application security.…