Sure frontier models can continuously scan projects for vulnerabilities, but projects written in memory-unsafe languages (i.e. C) require an endless cycle of discovery, triage, and remediation as new features are built.
Just wait a couple more years, I am betting that it will be economically preferable to migrate software onto memory-safe languages and more verifiable architectures rather than repeatedly auditing systems built on fragile code.
If they truly wanted to do good, an "OSS Rewrite" service is a natural logical successor to vulnerability scanning. Instead of spinning wheels and burning tokens finding bugs in unsafe code, it would probably make more sense for AI to help move projects onto platforms where entire classes of vulnerabilities are just eliminated.
Sure frontier models can continuously scan projects for vulnerabilities, but projects written in memory-unsafe languages (i.e. C) require an endless cycle of discovery, triage, and remediation as new features are built.
Just wait a couple more years, I am betting that it will be economically preferable to migrate software onto memory-safe languages and more verifiable architectures rather than repeatedly auditing systems built on fragile code.
If they truly wanted to do good, an "OSS Rewrite" service is a natural logical successor to vulnerability scanning. Instead of spinning wheels and burning tokens finding bugs in unsafe code, it would probably make more sense for AI to help move projects onto platforms where entire classes of vulnerabilities are just eliminated.