Factory launches Security Factory, an agentic security pipeline

Factory introduced Security Factory in Private Preview on November 10, 2026, an agent pipeline that consolidates security findings, triages real risk and produces tested, pull request ready fixes.

Factory announced Security Factory on November 10, 2026, launching the agentic pipeline in Private Preview for a limited set of customers. According to Factory's announcement, the system consolidates security findings, triages real risk, and produces tested, pull request ready fixes.

What's new in Security Factory

Factory launched Security Factory in Private Preview on November 10, 2026, limited to selected customers.
The pipeline connects three continuous stages: signals (consolidating findings), triage (assessing real risk) and remediation (verified fixes).
Connectors pull findings from existing security tools, including scanners, threat intel feeds, asset inventories and chat platforms.
Triage agents use Factory's Security Review, applying STRIDE, OWASP and supply chain methodologies, to investigate vulnerability reachability, validate exploitability and chain multi-vulnerability attack paths.
Remediation agents reproduce vulnerabilities in execution environments such as Droid Computers, OS-level sandboxes or customer cloud via OpenCompute, then build and test fixes against the original exploit and check for regressions before preparing pull requests.
Organizations can configure agent autonomy from requiring human approval up to auto-deploying fixes within approved policy.

What it means for people building with AI

The move pushes autonomous coding agents beyond simply flagging vulnerabilities into end to end, tested remediation. For any team weighing how far AI agents can safely go on security work, Security Factory offers a concrete reference point: an agent pipeline that finds a flaw, proves it is exploitable in a real execution environment, builds and tests a fix, and hands over a pull request, while organizations keep control over how much autonomy the agents get before a fix ships.

Sources

Introducing Security Factory (Factory, November 10, 2026, official)

Written with AI assistance, strictly from the sources listed above. Before it went live, automated checks verified its dates, sources and every language edition.