Xint Blog

Companies in the cross hairs of state-backed attackers need to go beyond security that checks a box. Our work with DARPA and Woori is a template for AppSec that meets the needs of private sector companies with the highest security requirements.

DARPA will use Xint’s proven ability to find critical flaws in source code, runtime, and binaries to test the use of AI to protect the security of military communications across inhouse, open-source, and proprietary messaging applications at scale.

Bug discovery has become nearly commoditized by AI but that has actually increased the need for a platform to go from discovery to validation to remediation

What makes Xint different from XBOW

LLMs uncover more bugs than teams can patch. Vendors are selling auto-remediation as a cure, but real world results demonstrate the need to keep security engineers in the loop.

This is an overview of the two vulnerabilities uncovered by Xint Code impacting Apple devices running iOS, macOS, and iPad OS

How Xint can act as your central findings management platform to rationalize findings coming from various sources.

Xint researcher analyzes the types of vulnerabilities that AI coding produces.

This is an overview of the three high-severity vulnerabilities uncovered by Xint Code in Android which have now been patched by Google Devices

Xint Pulse offers one-time scans of web applications powered by the full award-winning capabilities of the Xint enterprise platform

Xint achieves the world's leading standard for information security management, evaluating an organization's security policies, risk management practices, access controls, and incident response procedures.

What are the incremental benefits to each new (more expensive) model and when does it make sense to update?

Everyone is claiming AI in AppSec, but there are meaningful differences in how AI is used, leading to fundamentally differences in exposure

Non-deterministic LLM vuln discovery is actually a strength for Xint since it can go beyond fixed rules or patterns that are easily gamed by attackers.

LLMs are changing the role of security researchers and engineers, but companies laying off human cyber experts just as AI coding generates more vulnerable code are in for a world of hurt.

We don’t know the FP rate for the latest frontier models when it comes to AppSec. We share ours and how we arrived at it.

This is an overview of the two kernel-level vulnerabilities uncovered by Xint Code in MacOS, iOS and iPadOS which have been patched by Apple

Zero data retention (ZDR) policies for LLMs in AppSec are not the default, but here's why they belong at the top of your AI procurement checklist.

These are the 8 questions that will tell you whether a vendor is selling a pen test alternative, a faster SAST tool, or a demo that doesn’t survive production

The story behind CVE-2026-31789 demonstrates how DARPA and Xint are accelerating AI cyber defenses

Press Release for April 21, 2026

In this exclusive report, Xint researchers compare Mythos's publicly disclosed results versus what broadly available models can accomplish using advanced scaffolding

While code is abundant, assurance is scarce. The winners won't be the teams that generate the most code, it’ll be the teams that can prove it's safe.

A critical CPython CVE today took less than 45 minutes of human work to find, triage, and fix because of Xint Code

Linear increases in code are leading to exponential token burn increases. Xint's orchestration brings clear, predictable pricing.

Even secure-looking code can hide dangerous flaws. Learn why business logic vulnerabilities are hard to detect and why most scanners miss them.

Real Vulnerabilities. Actionable Results.

An introduction to DARPA's AI Cyber Challnge and Theori's third place cyber reasoning system

How we learned to build effective LLM agents for hacking at DARPA's AI Cyber Challenge (AIxCC)