Mountain View – October 15, 2026 -- Cyfendo, a Silicon Valley application-security startup, has launched an AI platform that investigates software vulnerabilities and prepares tested patches for small businesses, as the FBI's 2025 Internet Crime Report recorded about $20.88 billion in reported losses across 1,008,597 complaints.
Cyfendo reports four critical issues per scanned codebase
According to Cyfendo's own scan data, the company finds an average of four critical-severity issues per codebase, and roughly seven in ten findings are rated high or critical. The company states these results come from projects it scanned, not a representative survey of business applications.
Platform traces untrusted data and re-tests proposed fixes
The platform traces untrusted data through source code to sensitive operations, runs isolated checks to investigate exploitability where supported, and prepares a code patch for review. It then re-tests the finding and relevant application behavior. Developers review the evidence and decide whether to accept the change; Cyfendo does not merge patches directly into production software.
Developers can connect GitHub, GitLab or Bitbucket repositories, upload project files or work from the command line. The review is designed to sit alongside platform protections in tools such as Lovable, Cursor and Supabase, none of which, the company argues, should be assumed to cover an entire codebase after multiple changes.
Company reports 94.06% recall on Java benchmark
In September 2026 evaluations on OWASP standardized benchmarks, Cyfendo reported 94.06% recall and 96.38% precision on the Java Benchmark v1.2 (2,740 test cases). On the Python Benchmark v0.1 (1,230 cases), it reported 90.04% recall and 93.78% precision. The figures are company-reported; they are not an OWASP endorsement or an independent validation of automated repairs. Cyfendo has published its benchmark methodology for review.
Free tier covers 10,000 lines; paid plans start at $99 a month
The code-security platform is available now. The free plan covers up to 10,000 protected lines of code and five scans a month, with detailed findings and limited patch evaluation. Paid self-service subscriptions start at $99 per month and add automated generation of review-ready patches and higher scanning allowances. A separate application penetration-testing service remains in private beta for select businesses and is excluded from those subscriptions.
Target market: 36.2 million U.S. small businesses
The U.S. Small Business Administration counted approximately 36.2 million small businesses in 2025, more than 4.3 million of them in California. Cyfendo cites Google Threat Intelligence Group's September 8, 2026 report, which described a suspected cybercriminal using an AI-enabled framework to plan, build and run a mass credential-harvesting campaign in under six hours, compromising thousands of third-party login credentials.
Founder spent 2020-2026 at Google in AI and security
Founder and CEO Bryan Vuong served as Senior Engineering Manager, AI and Security, at Google from 2020 to 2026, and earlier worked at Facebook as a machine-learning research scientist and engineering manager. He said the concern driving the company is the gap between increasingly powerful attack capabilities and the resources ordinary businesses have to defend themselves.
Cyfendo says automated analysis cannot replace sound access controls, timely updates or developer judgment.