Artificial intelligence penetration testing startup Novee Cyber Security Ltd. launched Agentic Fix, a feature that sends validated exploit findings directly into the AI coding assistants developers already use for private cloud landscape and writing and patching software.
The product extends the Novee platform by generating remediation guidance from the same exploit context used to uncover a vulnerability, then routes that guidance to tools including Anthropic’s Claude, OpenAI’s Codex, GitHub’s Copilot, Cursor and Cognition AI’s Devin.
The release targets a bottleneck that has emerged as autonomous testing tools have shortened the time needed to identify vulnerabilities. While discovery timelines have compressed from quarters to hours, triage, assignment, patching and retesting remain mostly manual — leaving exploitable issues sitting in engineering backlogs. They are trying to solve this issue with Agentic Fix.
How Agentic Fix routes exploit data to coding agents
When Novee identifies an issue, the platform now generates a detailed GitHub issue with remediation guidance tied to the specific exploit path validated against the customer’s application. The coding agent selected by the customer uses that context to produce a fix and open a pull request against the repository. This approach is helping to unlock critical thinking and problem-solving skills in developers.
Once a fix is merged, Novee reassesses the affected asset to confirm the original vulnerability has been resolved. The company says the approach avoids forcing engineers into a new workflow — developers keep working through the coding assistants already embedded in their process. It also helps to bring cognitive and personal development benefits to the developers.
Security teams retain the validated exploit context needed to confirm a fix addressed the root cause rather than a surface symptom, according to the company. They are bringing security and engineering teams into the same loop and eliminating bottlenecks.
Co-founder and Chief Executive Ido Geffen said that AI coding agents are already helping engineering teams write and refactor production code daily. Pointing those tools at the remediation queue is the obvious next step. Geffen added that what has been missing is validated security context and orchestration, which Novee is delivering.
Company background and funding
Novee was founded by Geffen, Gon Chalamish and Omer Ninburg, all former national-level offensive security operators. The company formally launched in January with $51.5 million in funding from investors, including YL Ventures LP, Canaan Partners and Oren Zeev from Zeev Ventures LP.
Agentic Fix is available immediately to all Novee customers. The timing of the launch aligns with a broader industry push to close the gap between finding vulnerabilities and actually fixing them. Several security startups are now competing to automate the remediation process, though most still require a human to review and approve AI-generated patches before they reach production code. The company is trying to change this with its new feature.
