Google discloses PageBreak AI security agent that found over 500 XSS bugs
System uses deterministic validators to achieve near-zero false positive rate
Google has disclosed its AI-powered security agent PageBreak, which identified over 500 cross-site scripting (XSS) vulnerabilities across its web applications since entering full operation in January, according to a paper published by the company. The agent uses Gemini models to autonomously investigate potential flaws, but reports only those that deterministic validators can successfully reproduce against live applications, resulting in a near-zero false positive rate.