Security Swarm

Devin Security Swarm is a security scanning and remediation product that builds on Devin's agentic capabilities. It divides repositories among parallel Devins to detect vulnerabilities such as SQL injection, SSRF, and authentication bypasses. The system supports four scan modes: Single-repo, Multi-repo (up to 25 repositories), Organization-wide, and Ingest findings. Scan profiles allow users to define scope, threat models, and severity criteria, while interactive mode enables review of the proposed threat model before execution. Sandbox validation attempts to reproduce findings in an isolated environment to confirm exploitability. The platform supports ingesting existing findings from tools like GitHub Advanced Security and Semgrep via CSV, SARIF, or JSON formats. Scans can be scheduled automatically or triggered via API, and results are integrated into the Devin platform for remediation.