Devin Security 2.0 launches, built for a new security threat landscape
Source Cognition·Windsurf blog (mirror)

At a glance
Devin released Devin Security 2.0, a security tool that scans code with frontier AI models to find vulnerabilities (security weaknesses), ranks them by real risk in your environment, and drafts code change requests to fix them.
Key points
It can scan with frontier security models such as Claude Mythos, and companies do not need separate access to those models.
It uses an approach called Agentic MapReduce, splitting code into batches investigated in parallel and then combining results to keep costs down.
Important findings are checked in an isolated environment against a running instance of the app.
It targets a world where AI is speeding up attacks, as with the recently disclosed remote code execution flaws (attacks that run commands on a server from outside) in PHP and Node.js.
Why it matters
As AI produces more vulnerability reports, deciding what to fix first has become harder, and this tool backs priorities with evidence and carries them through to fixes.
Original article
Devin Security 2.0: Built for the new threat landscape
Cognition·Windsurf blog (mirror) · Oct 26, 2026, 9:00 AM GMT+9 · devin.ai
Read on Cognition·Windsurf blog (mirror)AI read the original article and summarized it in plain language. It may contain mistakes, so please check the original for accuracy. The article's copyright belongs to Cognition·Windsurf blog (mirror).