Press

Artificial intelligence is becoming remarkably good at finding vulnerabilities in software. Only a few years ago, AI-based vulnerability discovery was largely a research exercise. That is changing quickly. Google’s OSS-Fuzz project reported in 2024 that AI-generated and enhanced fuzzing targets had uncovered 26 previously unknown vulnerabilities in mature open-source projects, including a vulnerability in OpenSSL that Google said may have existed for two decades.

The Computer Weekly Developer Network met with the company’s CEO and co-founder Moshe Bar to talk about where we stand, in key developer terms, with system architecture and code constructs in the face of modern cyber risks.

Open source software has become fundamental to modern application development. Few development teams today build an application entirely from first principles. Instead, they depend on open source databases, libraries, frameworks, cryptographic components, web servers, and thousands of smaller packages that allow them to deliver software far more quickly.

For Linux administrators, keeping systems patched has always been one of those jobs that sounds considerably easier than it actually is. Run the updates. Reboot when necessary. Watch the security mailing lists. Done. Except that isn’t how real Linux environments work.

For nearly a decade, cybersecurity has been dominated by one overarching concern: securing the software supply chain. Organizations invested heavily in Software Bills of Materials (SBOMs), artifact signing, provenance frameworks, reproducible builds, and vulnerability scanners capable of identifying compromised dependencies before software reached production.

The first generation of enterprise AI security has largely followed the same pattern organizations have used for decades: security teams define a set of rules, deploy them into production, and periodically update them as new threats emerge. That approach worked reasonably well for traditional applications because software behavior changed slowly and attack techniques evolved over months or years.

Codenotary has announced AgentMon Start, an AI agent monitoring platform designed specifically for small and mid-sized businesses. The product delivers continuous visibility into autonomous AI agent behavior, token cost tracking, governance controls, and security anomaly detection without requiring cloud deployment or a dedicated security team.

Artificial intelligence has become deeply embedded in the modern software development workflow. From generating code snippets to debugging complex applications, AI-powered coding assistants are no longer experimental. They are everyday tools for millions of developers worldwide. Yet, despite this widespread adoption, one issue continues to define the relationship between developers and AI, trust.

Artificial intelligence is increasingly moving out of the cloud and onto hardware that organizations can own and operate themselves. That matters because modern AI coding tools can send enormous amounts of source code, documentation and other potentially sensitive data through a model while an engineer works. Until recently, running models powerful enough for serious software development required expensive data-centre infrastructure and specialist expertise. A new class of compact AI systems is changing that equation.

Codenotary has expanded its free Linux security program to Debian and Ubuntu, following what the company describes as strong uptake of a similar offer for AlmaLinux users announced in July 2026. The program gives organizations full access to the Codenotary security platform for up to 25 Linux machines at no cost, with no feature restrictions and no expiration date.

Codenotary, leaders in assuring safe and secure use of AI, today announced the expansion of its free Linux security program to Debian and Ubuntu giving organizations access to the complete Codenotary security platform for their first 25 Linux machines at no cost, with no feature restrictions and no expiration date.

Codenotary announced the expansion of its free Linux security program to Debian and Ubuntu giving organizations access to the complete Codenotary security platform for their first 25 Linux machines at no cost, with no feature restrictions and no expiration date.

The company’s permanently free security platform for up to 25 machines is now available to organizations running Debian and Ubuntu, as well as AlmaLinux.

On September 11, 2026, an important part of Europe’s Cyber Resilience Act became real. From that date, manufacturers of products with digital elements must report actively exploited vulnerabilities and severe security incidents under strict timelines. An early warning must be submitted within 24 hours of becoming aware of the vulnerability or incident. A more complete notification follows within 72 hours. For an actively exploited vulnerability, a final report is required no later than 14 days after a corrective or mitigating measure becomes available. Severe incidents have their own final-report deadline of one month after the 72-hour notification.

Codenotary, leaders in assuring safe and secure use of AI, today announced the expansion of its free Linux security program to Debian and Ubuntu giving organizations access to the complete Codenotary security platform for their first 25 Linux machines at no cost, with no feature restrictions and no expiration date.

On September 11, 2026, an important part of Europe’s Cyber Resilience Act became real. From that date, manufacturers of products with digital elements must report actively exploited vulnerabilities and severe security incidents under strict timelines. An early warning must be submitted within 24 hours of becoming aware of the vulnerability or incident. A more complete notification follows within 72 hours. For an actively exploited vulnerability, a final report is required no later than 14 days after a corrective or mitigating measure becomes available. Severe incidents have their own final-report deadline of one month after the 72-hour notification.

Agentic AI has been sold to the enterprise on a simple and compelling promise: software can now do more than assist employees. It can perform work on their behalf. In many cases, they can complete in seconds what previously required several employees and multiple approval steps.

Codenotary today announced that its co-founder and chief technology officer, Dennis Zimmer, will deliver a keynote presentation on September 29 at the CCX Cloud Computing Conference 2026 in Heidelberg, at one of Germany’s leading conferences dedicated to cloud computing, enterprise infrastructure, Kubernetes, DevOps, and AI-powered enterprise technologies.

Immudb can work alongside rsyslog, Loki, Elasticsearch, or an operational database to give Linux administrators a way to preserve and verify the integrity of critical event histories.

AI agents are rapidly becoming part of everyday enterprise operations. Employees now use coding agents, research agents, workflow agents, customer-service agents, and autonomous orchestration systems that can make decisions, call tools, access data, and trigger actions across infrastructure.

The AI industry has spent the past two years obsessing over models. Which LLM scores highest on benchmarks? Which reasoning model is fastest? Which provider has the lowest token price? These are increasingly the wrong questions.

Edge computing has entered a new phase. What began as a way to reduce latency and process data closer to where it is created is rapidly becoming the operational foundation for enterprise AI. Factories, retail stores, hospitals, utility substations, telecommunications sites, logistics hubs, and smart infrastructure are no longer running simple applications at the edge- they are running fleets of autonomous AI agents.

Large language models have changed software development at a pace that rivals or exceeds previous tooling shifts. Tasks that once consumed hours (writing boilerplate, generating unit tests, translating APIs, documenting services, or prototyping new features) can now be completed in minutes.

The recent incident involving OpenAI’s autonomous cybersecurity models and Hugging Face should be viewed as more than an isolated laboratory accident. It is an early glimpse into the operational realities organizations will soon face as AI agents become trusted participants in enterprise computing.

Codenotary, the company behind the open source immutable database immudb, has been accepted into Anthropic’s Claude for OSS program. The partnership gives Codenotary access to Claude AI to accelerate development of immudb, which provides cryptographically verifiable, tamper-evident data records used in software supply chains, compliance systems, financial infrastructure, and AI workloads.

Codenotary says Anthropic’s Claude for OSS program will help accelerate immudb development and improve code quality.

Codenotary, leaders in assuring safe and secure use of AI, today announced it has been accepted into Anthropic’s Claude for OSS program helping to accelerate software development and improve quality.

Software is built, but before it “ships” to a point of live production, the software engineering team (almost instinctively) initiates a set of peer review and code review processes, which are designed to weed out integrity and defects, and ensure functionality and performance.

Codenotary has announced a permanently free tier of its AI-powered security platform for organizations running AlmaLinux, covering up to 25 machines with no feature restrictions and no expiration date.

Free for 25 machines, platform includes autonomous security, CIS compliance, SBOM management, Linux patching and AI agent monitoring with no feature limits, no trial period and no security team required

Codenotary, leaders in assuring safe and secure use of AI, today announced it has joined Anthropic’s Cyber Verification Program, a security research initiative that enables qualified organizations to conduct advanced defensive AI cybersecurity research under Anthropic’s responsible-use framework.

Codenotary CEO Moshe Bar said AgentMon 3 makes it possible for cybersecurity teams to dynamically apply runtime security policies as both changes in patterns are observed and new threats are detected. Every action an AI agent performs continuously shapes a live baseline that cybersecurity teams can use to distinguish normal behavior from risky or anomalous behavior in real time, he added.

Codenotary has this month detailed its AgentMon 3 offering. This is an enterprise AI security offering with adaptive runtime security policies. What makes a runtime security policy adaptive?

Most discussions around AI security focus on detection. Can the security platform recognize prompt injection? Does it detect credential leakage? Can it identify unauthorized tool usage or sensitive data leaving the organization?

Codenotary has announced AgentMon 3, the latest generation of its enterprise AI security platform, introducing adaptive runtime security policies. These continuously evolve as AI agents operate across an organization by learning from customer-specific workflows, observed behavioral patterns, and threats.

Enterprise AI security platform dynamically adapts to customer behavior, protects more than 5 million AI agent interactions every day

The fundamental challenge is that agentic systems are not deterministic workflows. They reason, plan, delegate tasks, invoke tools, retrieve information, and adapt to changing circumstances. Unlike a traditional application, an AI agent can take a different path every time it receives a task.

AI safety concerns are everywhere. The technology industry is claiming to be able to address the reality of the risks that do exist from the base-level data provence and infrastructure layer, from the agentic policy control layer, from the controlled agentic code execution layer and from the upper observability layer.

AI agents are rapidly moving from experimentation into daily enterprise operations. Employees now use agentic systems to write code, analyze financial data, summarize legal documents, automate workflows, manage infrastructure, and interact with customers. Unlike traditional AI assistants, agentic systems do not simply generate responses: they take actions, invoke tools, access systems, and increasingly operate autonomously.

Codenotary announced the release of immudb 1.11

Multi-agent AI systems are live in production, but who is monitoring them? Discover the operational gaps in tracking autonomous agents.

AgentMon identifies approximately 210,000 daily security, compliance, operational anomalies across enterprise environments

AI agents are running wild across engineering infrastructure. Whether your team is deploying custom LangChain workers, spawning Cursor loops, or running Claude Code, autonomous agents are actively making execution decisions on your systems.

Agentic networks are growing explosively, and with that growth come entirely new categories of risk

AgentMon provides continuous insight into rapidly-growing agentic AI environments

Codenotary has announced the availability of AgentX, an autonomous platform designed to manage, secure, and protect large-scale Linux infrastructure in the cloud or on-premises through coordinated networks of AI agents.

Multi-agent platform AgentX enables administrators to operate massive server fleets with autonomous protection, compliance reporting, governance, and decision-making.

SaaS platform secures Linux and applications, fixes configuration issues, and optimizes performance

Excited to see our work featured on DevOps.com: a preview of our AI platform that autonomously detects and remediates IT issues. 🚀 Great step toward truly self-healing infrastructure.

AI is collapsing the time between vulnerability discovery and exploitation, and unless defense becomes autonomous and operates at machine speed, human-driven security workflows simply won’t keep up.

Serves as foundation for company’s software supply chain security products

Just because AI is writing your code doesn’t mean you can stop worrying about software bills of materials.

Improves visibility into data supporting AI applications to improve security and compliance

Foundation of company’s large-scale software supply chain security products