Cognition upgrades Devin Security with Claude Mythos deep scans

Cognition has upgraded Devin Security with deep vulnerability scans powered by Anthropic’s Claude Mythos alongside other frontier cyber-capable models, giving enterprise customers managed access to those models inside Devin without separate lab contracts or infrastructure setup.

Rather than scoring alerts in isolation, Devin Security collaborates with engineering and security teams to maintain a living threat model that maps services, hosts, deployment paths, unused code, network policies and business impact. Guided by that threat model, Devin runs deep scans to uncover multi-step chained exploits across large repositories while also ingesting, deduplicating and re-verifying alerts from third-party scanners, bug bounties and security advisories.

To resolve verified findings at scale, Devin supports three workflows: proposing evidence-backed risk adjustments or false-positive records for human sign-off (while keeping original CVSS scores and never relabelling CISA Known Exploited Vulnerabilities), applying interim infrastructure mitigations such as WAF rules or security-group changes, and launching thousands of parallel isolated virtual machines that reproduce each vulnerability, write a patch and verify the fix against the reproduction test. Cognition is committing hundreds of millions of dollars in Devin credits to provide free frontier-model scans and remediation support for current and new enterprise customers.