Industrializing Security Research

Interactive agents can find vulnerabilities. The harder problem is making security research repeatable across sessions and targets.

This series documents the controls behind that transition, including stable research roles, isolated contexts, durable state, and independent triage.

It continues from What’s Left When the World Becomes Agentic? .

Posts

Part 1 · Sep 6, 2026

One Context Is Not a Security Team

Why a broad suite of security skills makes focused research hard to repeat.


Part 2 · Sep 6, 2026

Task Swarms Blur Roles

Why leader-centric agent swarms do not preserve distinct security-research techniques.


Part 3 · Sep 6, 2026

Triage Needs Fresh Context

Why security findings need a fresh context with the opposite mandate.


Part 4 · Sep 10, 2026

From Agentic Sessions to an Engine

How isolated coding agents, Git coordination, and separate post-processing became an execution engine for continuous security research.