Webinar Description
Key Takeaways
- Addresses security challenges arising from AI agents contributing code to software projects
- Covers the agentic remediation lifecycle: visibility, triage, remediation and prevention
- Explores SAST and SCA techniques applied to AI-generated code
- Demonstrates automated remediation workflows using Cycode’s Maestro Playbooks
- Designed for AppSec professionals, CISOs, DevSecOps teams and security engineers
Introduction
As AI agents increasingly contribute directly to software codebases, security teams face a fundamental shift in how vulnerabilities enter production environments. This virtual webinar examines the operational challenges of securing agentic development workflows, offering application security professionals and technical leaders practical approaches to maintaining visibility and control when autonomous systems generate code at scale.
The timing reflects broader industry concerns about AI-generated code security. With attackers now leveraging AI to identify and exploit vulnerabilities more rapidly, organisations adopting agentic development practices must adapt their security operations accordingly. Traditional application security principles remain relevant, but the tactics required to implement them have evolved substantially.
About This Event
Titled “How to Secure Agentic Development: From Agent Visibility to Autonomous Remediation,” this on-demand webinar combines practitioner discussion with live demonstrations. The session walks through the complete agentic remediation lifecycle, from initial detection of AI agent commits through to preventing those agents from reintroducing previously identified risks.
The format emphasises hands-on operationalisation rather than theoretical discussion, with demonstrations showing how Cycode’s Maestro Playbooks can automate significant portions of the security workflow while minimising the need for manual intervention.
The Agentic Remediation Lifecycle
The webinar structures its content around four interconnected phases that form what presenters describe as the agentic remediation lifecycle. Each phase addresses a distinct operational challenge that emerges when AI agents become active contributors to codebases.
Visibility into AI agent commits forms the foundation. Without clear insight into which code changes originate from autonomous agents versus human developers, security teams cannot appropriately prioritise their review efforts or understand their true risk exposure.
AI-driven triage and exploitability analysis addresses the scale problem. When code generation accelerates through automation, manual review becomes impractical. The session explores how AI can be applied to assess which identified issues represent genuine exploitable vulnerabilities versus theoretical concerns.
Remediation through SAST and SCA applies established application security techniques to AI-generated code. Static Application Security Testing identifies vulnerabilities in source code, while Software Composition Analysis examines third-party dependencies and libraries that AI agents may introduce.
Prevention of risk reintroduction tackles a challenge unique to agentic workflows. Unlike human developers who learn from corrections, AI agents may repeatedly introduce the same vulnerability patterns unless explicitly constrained. The session addresses how organisations can establish guardrails that prevent this cycle.
Industry Context: The Evolving Threat Landscape
The security challenges discussed in this webinar reflect a broader transformation in software development practices. As organisations adopt AI coding assistants and autonomous development agents, the volume and velocity of code changes has increased dramatically. This acceleration creates both opportunity and risk.
Attackers have recognised this shift. AI tools that accelerate legitimate development also accelerate vulnerability discovery and exploitation. Security teams now operate in an environment where the window between vulnerability introduction and potential exploitation has compressed significantly, making automated detection and remediation increasingly essential.
Who Should Attend
This webinar is designed for practitioners directly responsible for application security in organisations adopting AI-driven development practices. Security engineers and AppSec professionals will find the technical demonstrations most immediately applicable, while CISOs and product security managers may benefit from the strategic framing around operationalising security in agentic environments.
DevSecOps teams working to integrate security controls into automated pipelines represent another core audience, particularly those grappling with how existing tooling and processes must adapt when AI agents become regular contributors to codebases.
Conclusion
The webinar’s central argument—that security fundamentals remain constant even as tactics evolve—offers a useful framework for organisations navigating this transition. Visibility, prioritisation, remediation and prevention continue to define effective application security programmes. What changes is how these principles must be operationalised when autonomous agents become active participants in the software development lifecycle.