Auditing in the age of (good enough) AI

<p>Security firms have published numerous blog posts describing how they pointed their agent harness at a codebase and found dozens of bugs (<a href="https://blog.trailofbits.com/tags/patch-the-planet/">we’re one of them</a>). However, these posts tend to focus on agentic code review, which is just one aspect of how we use AI in our security reviews. We want to give a different perspective: before