Official Capital One announcement of VulnHunter OSS release:
- Apache License 2.0; github.com/capitalone/vulnhunter
- Agentic attacker-first forward analysis from entry points
- Falsification engine to challenge own findings / cut false positives
- Evidence-backed remediation proposals
- Validated on thousands of internal repos
- Requires Claude Opus 4.8 + Claude Code environment (bring-your-own model access)
- Initial implementation as Claude Code skill