Application security posture management company Apiiro Ltd. today announced the launch of Guardian Agent, a new artificial intelligence application security agent that guards AI models and prevents vulnerable and noncompliant code before it’s generated.

Guardian Agent is designed, in the company’s words, to “bring order to chaos,” by enabling enterprises to scale AI-native development while continuously reducing risk, improving compliance and aligning security with business velocity.

The offering seeks to assist with the growing issue whereby, as AI has fundamentally changed how software is built, it has also rapidly expanded application attack surfaces up to 10 times. Apiiro argues that traditional AppSec scanners are not built for today’s reality because they’re fragmented and noisy, generate large volumes of false positives, and lack the context required to understand real risk, resulting in operational chaos and growing exposure across the software development lifecycle.

“The biggest challenge in AppSec today is not detection; it’s that enterprises cannot secure what they don’t understand,” said Chief Executive Idan Plotnik. “To stay in control and reduce risk, organizations must implement modern AppSec programs capable of executing 24/7 at scale.”

Apiiro’s Guardian Agent addresses the issues by allowing enterprises to proactively and contextually prevent risk before AI generates the code. The agent continuously understands software architecture, attack surface, runtime exposure and organizational policies and uses this context to guard AI assistants, vibe coding and agentic development workflows in real time.

Core features include the ability to prevent AI models from generating vulnerable and noncompliant code by rewriting prompts and generating contextual, secure prompts in real time. There’s also support for adapting secure prompts continuously as software architecture, runtime environments and organizational policies and regulatory requirements evolve. In addition, it eliminates manual threat modeling and AppSec task backlogs. And finally, it can translate complex AppSec decisions into a shared language for developers, security teams and executive stakeholders.

Guardian Agent is powered by Apiiro’s AutoFix agent and its Secure Prompt technology that guards AI models and prevents the generation of vulnerable and noncompliant code. The technology also automates threat modeling on feature requests and design documents.

“With the launch of Guardian Agent, we are positioning Apiiro at the forefront of the next era of AppSe– where understanding, prevention and automation replace alert fatigue and reactive workflows,” added Plotnik.

Apiiro is a venture capital-backed company that has raised $135 million over two rounds, including rounds of $35 million in October 2020 and $100 million in November 2022. Investors include General Catalyst Group Management, Greylock Partners and Kleiner Perkins Caufield & Byers.

Image: SiliconANGLE/Ideogram