DryRun Security Natural Language Code Policies (NLCP): Define Security Rules in Plain English, Custom Policy Agent Enforces on Every PR for Both Human and AI Coders

DryRun Security Blog·high signal

DryRun Security ($8.7M seed) launched NLCP, which lets AppSec teams define security policies in plain English like 'Does this remove or weaken encryption for stored user data?' instead of writing Semgrep rules. The Custom Policy Agent autonomously scans every pull request and provides inline feedback, enforcing policies on both human developers and AI coding agents. Their DeepScan Agent does full-codebase security scans, and Code Insights MCP connects findings to MCP-compatible AI assistants for natural language querying.