Google's PageBreak AI Finds 500+ Security Bugs

Google disclosed PageBreak, an internal AI agent that autonomously finds exploitable vulnerabilities in its own web apps. Built on Gemini, it validates each bug with a working exploit, yielding a near-zero false-positive rate. It has uncovered over 500 XSS flaws since a November 2025 pilot. Google plans to pair it with CodeMender, its automated bug-fixing agent.