September 2026 Summaries

StackHawk announced the broad availability of Wingman, an AI-assisted application security product designed to address the growing gap between vulnerability discovery and remediation as AI accelerates exploit development and increases the volume of findings. Citing 2026 statements from Anthropic, OpenAI, and Microsoft, the company argues that organizations must prioritize fixing their existing vulnerability backlogs rather than measuring security success primarily through scan coverage, findings, or dashboards. Wingman integrates with coding agents including Claude Code, Cursor, GitHub Copilot, Codex, and Antigravity, testing completed features from an attacker’s perspective, returning findings to the same agent that wrote the code, verifying fixes through rescanning, and attaching an attestation to the resulting pull request. StackHawk reports that early-access users fixed more than 7,500 vulnerabilities between June and September 2026, including confirmed remote code execution, SQL injection, and cross-site scripting issues. The product is offered at $10 per user per month with unlimited applications, 50 scans per user monthly, and a 14-day free trial.