VulnHunter

Overview

VulnHunter is Capital One’s open-source agentic AI code security tool (Apache 2.0) that performs attacker-first forward analysis, falsifies its own findings, maps exploit paths, and proposes remediations. Runs on Claude Opus 4.8 via Claude Code.

Recent Developments

• 2026-07-17/18: Public release; GitHub capitalone/vulnhunter v0.1.0 (2026-07-18-capital-one-vulnhunter-open-source, 2026-07-18-capital-one-vulnhunter-github, 2026-07-18-capital-one-vulnhunter-topaiproduct)
• Validated on thousands of internal Capital One repositories
• Not a silver bullet; dual-use offender tooling — responsible-use required

Related

• capital-one
• attacker-first-analysis
• falsification-engine
• claude-opus-4-8
• claude-code
• coding-agents
• capital-one-vulnhunter-open-source