An AI-powered code scanning tool was benchmarked against eight human code reviewers over more than 1,000 codebases. The AI matched human performance on all critical and high severity bugs and found additional issues not detected by humans. The tool includes features such as automatic termination of scans when no new bugs are found and demonstrates a scaling relationship where doubling compute resources yields approximately 40% more findings. This benchmark suggests AI can be highly effective in identifying significant security bugs in code, potentially impacting future security review workflows.

The AI code scanner's ability to detect all critical and high severity bugs found by humans, plus additional findings, indicates a potential shift in how security code reviews might be conducted. While this does not represent a direct vulnerability or exploit, it highlights a technological advancement that could influence security auditing practices. There is no indication of exploitation or vulnerability in the AI tool itself.

This content is informational and does not describe a vulnerability or threat requiring mitigation. No patch or remediation is applicable. Security teams may consider evaluating AI-assisted code review tools as a complement to human reviewers but should not rely solely on this benchmark without further validation.