Google’s PageBreak Finds over 500 XSS Flaws in Its Web Apps

Google’s PageBreak finds over 500 XSS flaws in its web apps

Google has disclosed that its PageBreak AI security agent has found over 500 cross-site scripting vulnerabilities across the company’s web applications. The Google Product Security team said PageBreak began as a pilot in November 2025 and became a formal project…

Google Built an AI That Hunts Its Own Security Bugs

Google's PageBreak agent autonomously finds and verifies real vulnerabilities in its own web apps, cutting through the flood of noisy AI-generated security reports.

Google’s AI Found 500 Security Bugs. The Apps Built Properly Had Two

Google has published details of PageBreak, an internal AI agent that hunts for vulnerabilities in the company’s own web applications. It has turned up more than 500 cross-site scripting flaws, some on sensitive domains. The number that deserves more attention sits further down the post. Across hundreds of applications built on Google’s high-assurance web framework, […] The post Google’s AI Found 500 Security Bugs. The Apps Built Properly Had Two…