Google's Gemini agent harness fixed 1,072 Chrome security bugs in two releases.

Google disclosed that the last two Chrome versions, both shipped in June, patched 1,072 bugs versus 1,036 across the prior 23 releases spanning two years. An internally built Gemini-powered harness searches the codebase for vulnerabilities while suppressing false positives; one find was a sandbox escape that sat in the codebase for over 13 years, letting a compromised renderer read local files. The economics beat the count: triage per report used to run 5-30 minutes of human time, and automating dedup, reproduction, severity assignment and routing saves hundreds of developer-hours monthly. That's a direct threat to the human-in-the-loop triage model vulnerability-management SaaS sells.