Back to blogs
Written by
Travis Montgomery
Published on
April 10, 2026

Cygent Is Live: Meet Your Team's New AI Security Engineer

Cygent is an AI security engineer that finds vulnerabilities in your smart contracts, writes the fixes, and opens the pull request. No more PDFs and manual triage.

Table of Contents

Cygent Is Live: Meet Your Team's New AI Security Engineer

Web3 security tooling has been stuck in the same broken loop for years. Run a scanner, read a PDF, fix everything yourself. Today, we're shipping the fix. Cygent is live, and it doesn't just find vulnerabilities in your smart contracts. It learns your codebase, works alongside your developers, and writes the pull requests to fix what it finds.

Find the bug. Auto-write the PR. Ship safely.


Table of Contents


The Problem

Web3 development is moving faster than security can keep up. And the tooling that's supposed to help? It's been doing the same thing for years: generating noise and leaving you to deal with it.

Here's the loop most teams are stuck in right now:

  1. You run a static analyzer or CI/CD security check.
  2. It spits out a 50-page PDF, or worse, a dashboard full of findings, with a huge chunk being false positives.
  3. Your developers stop what they're building to spend hours, sometimes days, triaging findings, deciphering root causes, and writing fixes.
  4. In the process of patching one vulnerability, they introduce new ones.
  5. Repeat next sprint.

Scanners are noisy. Traditional tools give you a list of problems and walk away. They have no context on your specific protocol. They don't track your team's past security decisions. They don't know that you already accepted the risk on that particular finding three weeks ago.

Remediation is slow. Finding the bug is only 10% of the battle. Fixing it safely, correctly, without breaking something else, is the other 90%. And right now, that 90% is entirely manual.

Context is lost. Security lives in dashboards and PDFs. Developers live in IDEs, GitHub, and Slack. The gap between "here's what's wrong" and "here's the fix, merged and deployed" is where time, money, and safety go to die.

The result? Security becomes a bottleneck that slows down shipping. Teams start cutting corners. PRs get merged without review because the security backlog is already weeks long. Vulnerabilities that should take minutes to remediate sit open for days.

Web3 lost over $1.7 billion to hacks and exploits in 2024 alone. The problem isn't that we can't find bugs. It's that the distance between finding them and fixing them is still absurdly long.


What Cygent Is

Cygent is an AI security engineer that joins your team. Not a dashboard. Not a scanner. Not another PDF generator. An actual working member of your engineering org that finds vulnerabilities, writes the code to fix them, verifies the build, and opens a pull request, all from a chat message.

Old way: "Run a script, read a PDF, figure out the fix yourself."

Cygent way: "I found a reentrancy in Vault.sol. I wrote the fix, verified the build, and opened a PR. Want to merge?"

Cygent is powered by CARA (Cyfrin Audit & Review Assistant), Cyfrin's proprietary audit engine. CARA performs deep security analysis on smart contract codebases, detecting reentrancy vulnerabilities, access control issues, input validation gaps, oracle manipulation risks, MEV exposure, gas optimization opportunities, and more.

But CARA is just the detection layer. What makes Cygent different is everything that happens after the finding is generated. Cygent doesn't hand you a report and disappear. It takes ownership of the entire remediation lifecycle: discovery, triage, code generation, build verification, pull request. The way a senior security engineer on your team would.

It also learns on the job. Cygent maintains persistent memory across conversations, projects, and team members. It remembers your team's accepted risks, past architectural decisions, specific coding guidelines, and the context of every previous interaction. The longer it works with your team, the smarter it gets about your codebase. Just like a real engineer.

Here's the part that even surprised us: Cygent is capable enough to help build itself. We use Cygent internally to audit its own updates, fix its own bugs, and open its own pull requests. It's not just a tool we're shipping. It's an active contributor to our codebase every day.


How It Works

Cygent's workflow mirrors how a senior security engineer would operate on your team: onboard, review, communicate, execute, iterate.

The Lifecycle

  1. Onboard — Connect Cygent to your GitHub repositories through the Cygent GitHub App. Integrate it into Slack, Discord, Telegram, and your IDE via MCP. Each team gets a fully isolated instance with its own repos, integrations, and configuration.

  2. Auto-Review — Every time a PR is opened on a connected repository, Cygent runs a targeted security review focused on the changed code. It categorizes findings inline on GitHub into three groups: New issues introduced by the PR, Still present issues that existed before, and Resolved issues that the PR fixes. No more guessing what's new versus what was already there.

  3. Chat — Ping Cygent like any other coworker. Tag it in Slack, Discord, or Telegram with natural language: "Hey, fix all High findings in Vault.sol" or "What's the status of finding H-1?" or "Fix the reentrancy issue in withdraw()." Cygent uses semantic matching to understand which findings you're referring to, whether by ID, title keywords, or plain English.

  4. Execute — This is where Cygent breaks from every other tool on the market. When you ask it to fix something, it doesn't give you a recommendation and wish you luck. It generates an implementation plan, shows you exactly what it intends to do, waits for your approval, then writes the Solidity, runs the build verification, and opens a GitHub PR on a feature branch. You can iterate in conversation: "also add a natspec comment" or "don't change the public interface." Cygent adjusts.

  5. Merge — You review the PR like you would from any other engineer. Clean, secure code. Merged and shipped.

Beyond Bug Fixing

Cygent Code, the AI coding agent at the core, isn't limited to remediating security findings. It handles the full spectrum of code work:

  • Fix audit findings — individually or in bulk ("fix all critical findings", "fix finding H-1")
  • Build new features — implement functionality from scratch, from smart contracts to full-stack applications
  • Refactor and improve — restructure code, add tests, improve gas efficiency, update dependencies
  • Create new projects — scaffold entirely new codebases, contracts, and frontends from a description
  • Explore repositories — analyze project structure, dependencies, and code patterns without making changes

Every action follows the same plan → review → execute → PR cycle. You're always in the loop before anything gets committed.


Features and Integrations

Cygent isn't another dashboard you have to check. It lives where your developers already work.

Slack — The Deepest Integration

Cygent joins your Slack workspace as a full team member.

  • @mention in any channel for natural language requests — ask questions, trigger audits, request code fixes, query findings
  • Slash commands for structured actions with confirmation dialogs
  • Home tab — click Cygent in the sidebar for a dashboard view with projects, recent jobs, finding counts, and quick actions
  • Threaded conversations — Cygent remembers context within a thread for multi-turn discussions about code, findings, and remediation
  • Smart interjection — Cygent monitors channels and automatically contributes to security-relevant discussions when it has useful context, with engagement scoring so it only speaks up when it has something worth saying

Discord & Telegram

Full-featured bot integrations with the same core capabilities as Slack: @mentions, commands, rich formatting, interactive buttons, threaded conversations, and smart interjection. Your team uses Telegram? Cygent works there. Discord? Same thing. No compromise on functionality regardless of platform.

GitHub — Deep, Webhook-Driven Integration

  • Automated PR reviews with inline comments directly on pull requests
  • GitHub issue management — auto-create issues from findings above a configurable severity threshold, with full context including description, root cause, recommendation, and affected code
  • Bidirectional status syncing — close a GitHub issue or comment /cygent fixed and the finding status updates automatically
  • Branch management — Cygent Code creates feature branches and opens PRs directly
  • Trigger reviews from GitHub — comment /cygent on any PR to kick off a review

Google Meet — Yes, Really

Cygent joins your video calls.

Invite it to a Google Meet from Slack or any connected platform. It listens to architecture discussions with real-time transcription, responds via voice when addressed by name, answers security questions, offers recommendations, and drops supplementary details (code references, links) in the meeting chat. After the call ends, it generates a summary and posts it to your team's Slack channel, with individual follow-ups sent as DMs to relevant participants.

It only speaks when explicitly addressed. No interrupting natural conversation.

MCP / IDE Integration — Inline Security While You Code

Connect Cygent directly to your IDE for security analysis without leaving your editor.

Supported clients: Claude Code, OpenAI Codex, Cursor, VS Code (GitHub Copilot), Windsurf, Zed, and any MCP-compatible client.

From your IDE, you can list projects, browse findings by severity, triage findings inline, add new findings from code review, analyze Solidity code for vulnerabilities on the fly, and poll the status of running audits. Your IDE's AI agent composes Cygent's capabilities automatically based on natural language. Describe what you want and the agent orchestrates the right sequence of actions.

Enterprise-Grade by Default

  • Built to meet SOC2 standards — security isn't optional when you're building security tooling
  • Fully isolated instances — each team gets their own repos, integrations, configuration, and memory
  • Role-based access — Owner and Member roles with appropriate permissions
  • Team management — invite members by email, manage roles, control access

Scheduled Tasks — Automate the Recurring Stuff

Set up any prompt to run on a recurring schedule using natural language: "Schedule a weekly audit of my-repo every Monday at 9am EST" or "Daily DeFi threat monitoring at 3:30pm." Cygent supports timezone-aware scheduling, custom output formatting, configurable notifications, and auto-pauses tasks after three consecutive failures to prevent noise.

Manage everything from Slack: "list my scheduled tasks", "pause the weekly audit", "run it now."

Finding Management — From Discovery to Resolution

Findings are the core output, and Cygent gives you comprehensive tools to manage them:

  • Lifecycle tracking — Active, Resolved, Invalid (false positive with reason), or Deleted (soft-delete, restorable)
  • Bulk operations — triage multiple findings at once
  • Manual findings — add findings discovered outside automated analysis
  • Filtering and search — by severity, status, title, description, or code location
  • CSV export — get your data out when you need it
  • Downloadable HTML reports — formatted audit reports with all findings, severity breakdowns, and recommendations, suitable for sharing with stakeholders, investors, or compliance teams

Memory That Works

  • Cross-conversation context — Cygent recalls past conversations, decisions, and notes across channels and platforms
  • Semantic search — finds relevant past context even when you use different wording
  • Auditor notes — save notes during conversations ("remember that we accepted the risk on H-2") that persist across sessions
  • Project-level knowledge — maintains awareness of each project's architecture, patterns, and history

Web Search and Git Operations

  • Real-time web search — ask about current vulnerabilities, EIPs, protocol documentation, or any topic
  • URL analysis — share a link and Cygent will analyze, summarize, or extract relevant information
  • Git queries — commit history, branch status, diffs, blame, and other read-only operations
  • Safe script execution — run build, lint, test, and typecheck scripts with automatic package manager detection (npm, yarn, pnpm, bun)

Who This Is For

Smart contract development teams who are tired of security slowing down their shipping cadence. If your developers are spending more time triaging scanner output than writing code, Cygent gives those hours back.

Protocol teams who need continuous security monitoring, not point-in-time audits. Cygent reviews every PR automatically and keeps watch between formal audits, catching regressions and new vulnerabilities as code changes.

Security researchers and audit firms who want to augment their workflow with AI-assisted analysis. Use Cygent as a force multiplier. Let it handle the initial triage, generate reports, and manage findings while your auditors focus on the complex, creative vulnerability research that requires human intuition.

Any team building on-chain that recognizes security shouldn't be a phase you do at the end. It should be embedded in every PR, every standup, every architectural decision. Cygent makes that possible without hiring three more security engineers.


What's Live Today

Cygent is live and available through a whitelist application process. Here's what ships today:

  • Full security auditing powered by CARA with severity classification, live progress tracking, and scoped analysis
  • Automated PR reviews with three-way categorization and inline GitHub comments
  • Cygent Code — the AI coding agent that fixes findings, builds features, and opens PRs from conversation
  • Complete integration suite — Slack, Discord, Telegram, GitHub, Google Meet, and MCP/IDE support for Claude Code, Codex, Cursor, VS Code, Windsurf, and Zed
  • Finding management with full lifecycle tracking, GitHub issue syncing, bulk operations, and CSV export
  • Scheduled tasks with natural language scheduling and timezone support
  • Persistent memory with cross-conversation context, semantic search, and auditor notes
  • Downloadable HTML reports for stakeholders and compliance
  • Web search and URL analysis for real-time security context
  • Multi-tenant isolated instances built to meet SOC2 standards

This is not a beta with half the features grayed out. This is the product, live and working. We use it ourselves every day to build and secure our own codebase.


Why We Built This

We've been in the smart contract security business long enough to know the pain firsthand. At Cyfrin, we've audited some of the most critical protocols in DeFi. And every single time, we've watched the same pattern play out:

We deliver a thorough audit report. The team reads it. Then they spend weeks, sometimes months, working through the remediation. Findings that should take an afternoon to fix get stuck in backlogs. Context gets lost between the auditor's recommendation and the developer's implementation. New bugs creep in during the fix.

The audit isn't the bottleneck. Remediation is.

We built Cygent because we got tired of watching security slow teams down. Tired of watching good findings sit unresolved because the developer fixing them had to context-switch between a PDF, a codebase, and a test suite. Tired of the gap between "here's the vulnerability" and "here's the fix, merged to main."

Cygent closes that gap. Not with a better dashboard. Not with a prettier report. With an AI engineer that does the work.

And the fact that Cygent is good enough to help build itself? That's not a marketing line. It's our strongest proof of work. Every day, Cygent audits its own updates, fixes its own bugs, and opens its own pull requests against the Cyfrin codebase. When we say it acts like a real security engineer, we mean it literally.

Security shouldn't slow you down. It should scale with you.


Get Started

Cygent is live and accepting teams through a whitelist application.

Apply now to hire your new AI security engineer: https://cyfrin.typeform.com/to/lQXkqegu

Once accepted, you'll get:

  • A fully isolated Cygent instance configured for your team
  • Guided onboarding to connect your GitHub repos, Slack workspace, and preferred integrations
  • MCP setup guides for your IDE of choice
  • Access to the web dashboard for managing audits, findings, scheduled tasks, and team settings

Stop wasting days triaging PDFs and patching boilerplate vulnerabilities by hand. Stop treating security as a phase that happens at the end. Let AI handle the remediation so your team can get back to building.

Find the bug. Auto-write the PR. Ship safely.

👉 Apply for the whitelist

Secure your protocol today

Join some of the biggest protocols and companies in creating a better internet. Our security researchers will help you throughout the whole process.
Stay on the bleeding edge of security
Carefully crafted, short smart contract security tips and news freshly delivered every week.