Benchmarks, guides, and compliance docs.
XOR is the verification platform for AI coding agents. One loop: detect the vulnerability, patch it with an agent, verify the fix, and feed results back so agents learn.
Current verified dataset: 136 CVE samples, 1,736 evaluations across 13 agent configurations. Target scale: 6,138+ vulnerabilities across 250+ projects.
Platform overview: Detect → Patch → Verify → Learn.
One loop. Patch, verify, learn.
OutcomeKnow which agents fix real vulnerabilities before you deploy them.
MechanismXOR detects the CVE, dispatches an agent to patch it, writes a verifier, confirms the fix, and feeds results back into the agent harness.
ProofCurrent verified dataset: 136 CVE samples, 1,736 evaluations.
XOR writes a verifier for each vulnerability, then tests agent-generated patches against it. If the fix passes, it ships. If not, the failure feeds back into the agent harness.
AI agents generate fixes for known CVEs. XOR verifies each fix and feeds outcomes back into the agent harness so future patches improve.
62.7% pass rate. $2.64 per fix. Real data from 1,736 evaluations.
62.7% pass rate. $2.64 per fix. Real data from 1,736 evaluations.
Fix vulnerabilities for $2.64–$87 with agents. 100x cheaper than incident response. Real cost data.
13 agent-model configurations evaluated on real CVEs. Compare Claude Code, Codex, Gemini CLI, Cursor, and OpenCode.
How CVE-Agent-Bench evaluates 13 coding agents on 136 real vulnerabilities. Deterministic, reproducible, open methodology.
AI agents run with real permissions. XOR verifies tool configurations, sandbox boundaries, and credential exposure.
Security economics for agentic patching. ROI models backed by verified pass/fail data and business-impact triage.
Automated code review, fix generation, GitHub Actions hardening, safety checks, and learning feedback. One-click install on any GitHub repository.
A signed record of every agent run. See what the agent did, verify it independently, and feed the data back so agents improve.
A tamper-proof record of every AI agent action. Produces evidence for SOC 2, EU AI Act, PCI DSS, and more. Built on open standards so auditors verify independently.
How XOR signed audit trails produce evidence for SOC 2, EU AI Act, PCI DSS, NIST, and other compliance frameworks.