CodeMender

CodeMender is a Google DeepMind research project focused on automatically improving software security by generating high-quality vulnerability patches. It’s designed to work both reactively (patching newly found vulnerabilities) and proactively (rewriting existing code to reduce or eliminate entire vulnerability classes). The agent leverages advanced “thinking” model capabilities plus a toolbox for reasoning and validation, including program analysis techniques (static and dynamic analysis, differential testing, fuzzing, SMT solvers) and multi-agent components for critique and regression checking. DeepMind reports that in the first six months of development it upstreamed dozens of security fixes to open-source projects, with all patches reviewed by humans before submission, and that broader availability is planned but not yet generally released.