Aptori Launches Code-Q for Automated Vulnerability Remediation

San Francisco-based Aptori has announced the general availability of Code-Q, an AI-driven agent that automates code-level remediation for confirmed vulnerabilities, according to a press release. The new tool extends Aptori’s AI Triage system by not only validating vulnerabilities but also generating and verifying fixes directly within developer environments.

Code-Q uses a semantic graph of the codebase to reason about logic and produce deterministic, testable patches. Developers can review and merge these fixes within their IDE or CI/CD pipelines, supporting tools such as GitHub, GitLab, and Azure DevOps. This approach creates a closed-loop workflow from detection to remediation without leaving the development environment.

The system builds on Aptori’s SMART engine (Semantic Modeling for Application & API Risk Testing), which maps data flows and authorization logic to identify root causes of vulnerabilities. Each fix is transparent and auditable, showing what changes were made and why, enabling compliance with standards like SOC 2 and PCI DSS.

Code-Q is available now as part of the Aptori platform, offering integration options for enterprises with strict data governance and compliance needs.