https://cybertoolchain.io/tools/vulnhunter New releases and features in VulnHunter, tracked by The Cyber Toolchain. en Sat, 18 Jul 2026 01:10:28 GMT https://github.com/capitalone/VulnHunter/releases/tag/v0.1.0 https://github.com/capitalone/VulnHunter/releases/tag/v0.1.0 Sat, 18 Jul 2026 01:10:28 GMT Capital One open-sources VulnHunter: agentic AI SAST with attacker-first analysis, falsification engine, and automated fix-verify loop. • Adds `/vulnhunt` Claude Code skill: entry-point-forward scanner that maps attacker paths to dangerous sinks and filters findings through a multi-stage falsification pipeline (Recon → Parallel Hunt → Adversarial Disprove → Capability Filter). • Adds `/vulnhunter-fix` skill: test-driven remediation loop that writes an exploit demo, creates a failing security test (RED), implements the fix (GREEN), verifies the exploit is blocked, and opens a reviewable PR. • Adds `/vulnhunt-fix-verify` skill: independent, read-only agent that validates whether a finding was successfully remediated and emits a per-finding verdict. • Adds `vulnhunter-agent/` headless runtime: clones targets, runs `/vulnhunt`, publishes results, and opens GitHub issues for confirmed vulnerabilities — suitable for CI/CD pipelines. • Adds `harness/` batch-scanning and benchmarking tooling: manage a repo list, resume interrupted scans, collect findings centrally, and evaluate detection accuracy against a known-vulnerable corpus with LLM-judge scoring. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vulnhunter https://github.com/capitalone/VulnHunter/releases/tag/v0.1.0 https://github.com/capitalone/VulnHunter/releases/tag/v0.1.0 Sat, 18 Jul 2026 01:10:28 GMT Capital One open-sources VulnHunter: agentic AI SAST with attacker-first analysis, falsification engine, and automated fix-verify loop. • Adds `/vulnhunt` Claude Code skill: entry-point-forward scanner that maps attacker paths to dangerous sinks and filters findings through a multi-stage falsification pipeline (Recon → Parallel Hunt → Adversarial Disprove → Capability Filter). • Adds `/vulnhunter-fix` skill: test-driven remediation loop that writes an exploit demo, creates a failing security test (RED), implements the fix (GREEN), verifies the exploit is blocked, and opens a reviewable PR. • Adds `/vulnhunt-fix-verify` skill: independent, read-only agent that validates whether a finding was successfully remediated and emits a per-finding verdict. • Adds `vulnhunter-agent/` headless runtime: clones targets, runs `/vulnhunt`, publishes results, and opens GitHub issues for confirmed vulnerabilities — suitable for CI/CD pipelines. • Adds `harness/` batch-scanning and benchmarking tooling: manage a repo list, resume interrupted scans, collect findings centrally, and evaluate detection accuracy against a known-vulnerable corpus with LLM-judge scoring. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vulnhunter