Blog.Google reported that “We’re living through a massive shift in the software security industry. Large Language Models (LLMs) are unlocking unprecedented capabilities for automated vulnerability discovery, scaling far beyond the limits of human security expertise, and requiring new approaches for staying ahead of attackers.” The July 30m, 2026 Blog entitled “Stronger with every update: How we’re making Chrome and the web safer in the AI Era” (https://blog.google/security/chrome-stronger-with-every-update/) included how Google “…improved on our vulnerability finding agent harness by”:
- Adding support for model interoperability to leverage the unique strengths of both open-weights and proprietary models.
- Building a knowledge base of Chrome, including all previously identified CVEs and Chrome’s entire Git history, to extend the LLMs reasoning capacity past its training data.
- Encouraging developers to add SECURITY.md files, which help models better understand trust boundaries and develop an accurate view of the threat model.
- Adding a “critic” agent with a separate context to consume these SECURITY.md files.
- Introducing the ability to run vulnerability finding models over the codebase multiple times to account for model non-determinism and model improvements over time.
Interesting, but no surprise!
First published at https://www.vogelitlaw.com/blog/google-chrome-is-safer-because-of-ai