Google Cloud unveils CodeMender preview to fix code vulnerabilities at machine speed

[Google Cloud] Google Cloud announced security updates for the agentic era at its Security Summit. According to Google Cloud, its autonomous code-security agent CodeMender helps organizations find and fix code vulnerabilities at machine speed and can eliminate manual triage bottlenecks. CodeMender works with multiple models, including Gemini 4 Argon, and can identify previously unknown vulnerabilities and generate tested patches before they can be exploited. According to Google Cloud, Wiz recently used Gemini 4 Argon and other models to identify and help remediate core PHP vulnerabilities affecting 70% of websites, with Gemini 4 Argon contributing to finding the vulnerability, developing a likely exploit path, detecting attacks and validating the patch. Currently in preview, CodeMender adds secure isolation and flexible scanning: it isolates vulnerability verification and exploit simulation inside an operating system-level sandbox or isolated virtual machine and adds human-in-the-loop checks, and it can scan a specific folder, an entire repository or only files modified since the last scan. Google Cloud said hundreds of customers have used CodeMender since the preview became available in July. Ivan Fontarensky, CTO of Cybersecurity Services at Thales Group, said early evaluation shows the potential to reduce vulnerability discovery time by over 95% while keeping expert validation and remediation under human oversight.