Capital One open sources VulnHunter, an agentic code-scanning security tool

Finextra·high signal

Capital One released VulnHunter, an open source agentic AI tool that scans source code for vulnerabilities by reasoning like an attacker rather than pattern-matching like a traditional SAST scanner. A major regulated bank open-sourcing offensive-style security tooling is unusual and gives builders a production-hardened reference implementation. Landing the same week as Google's Gemini 3.5 Flash Cyber, it marks AI vulnerability discovery consolidating into a real product category.