# News

Latest news and insights from the Curtail team.

## How to Catch AI-Generated Code Regressions Before They Ship
AI-generated code is exceptionally good at passing tests and exceptionally bad at preserving behavior tests don't assert against. This is how to catch the runtime regressions your CI is silently letting through.

Read article→ [Link](/content/blog/catch-ai-generated-code-regressions-before-ship/index.html)

## ReGrade 3: The Self-Healing Loop for AI-Generated Code
AI coding tools produce 1.7× more bugs and 2.74× more security flaws than human code. ReGrade 3 closes the validation gap with deterministic behavioral comparison — giving your AI coding agent a self-correcting feedback loop before you ever open a merge request.

Read article→ [Link](/content/blog/regrade-3-the-self-healing-loop-for-ai-generated-code/index.html)

## ReGrade 3: Refactor With Confidence — AI-Powered Migration Without Behavioral Risk
Technical debt consumes 42% of developer time and costs the US $1.52 trillion. Memory safety bugs account for 70% of CVEs at Microsoft and Google, driving government mandates to migrate to languages like Rust. AI can accelerate the rewrite — but how do you prove the refactored code behaves identically? ReGrade 3 provides deterministic behavioral verification, field by field.

Read article→ [Link](/content/blog/regrade-3-refactor-with-confidence-ai-powered-migration-without-behavioral-risk/index.html)

## ReGrade 3: Every Merge Request Gets a Behavioral Audit — Automatically
Your CI pipeline catches syntax errors and failing tests. It does not tell you what actually changed in your API behavior. ReGrade 3 drops into your GitLab or GitHub pipeline and posts field-level behavioral regression reports directly in your merge request comments — giving developers, QA, and security teams the analysis they need before code hits main.

Read article→ [Link](/content/blog/regrade-3-every-merge-request-gets-a-behavioral-audit-automatically/index.html)

## ReGrade 3: Deterministic Guardrails for AI-Generated Code
AI coding tools have created a validation gap — code ships faster, but bugs ship faster too. ReGrade 3 provides deterministic behavioral comparison at every stage of the development lifecycle: before, during, and after the merge request.

Read article→ [Link](/content/blog/regrade-3-deterministic-guardrails-for-ai-generated-code/index.html)

## How We Found a 7-Year-Old Vulnerability — On the First Replay
A widely-used collaboration platform shipped a password hash disclosure bug for 7 years. Standard tests passed every day. ReGrade caught it on the first replay — without knowing it existed.

Read article→ [Link](/content/blog/how-we-found-a-7-year-old-vulnerability-on-the-first-replay/index.html)

## Playwright MCP Gave AI Eyes for the Browser. ReGrade Does the Same for Your Network.
Playwright MCP transformed UI testing by giving AI agents structured access to browser state. ReGrade applies the same principle to network behavior — catching API regressions, missing headers, and subtle behavioral changes at the field level, with no test scripts to write.

Read article→ [Link](/content/blog/playwright-mcp-gave-ai-eyes-for-the-browser-regrade-does-the-same-for-your-network/index.html)

## The Hidden Risks of Agentic AI Systems — And Why Verification Matters
Agentic AI systems that let LLMs fetch and analyze data look powerful on the surface. But a growing body of research reveals dangerous failure modes — from silent hallucinations to context window degradation — that make verification essential.

Read article→ [Link](/content/blog/the-hidden-risks-of-agentic-ai-systems-and-why-verification-matters/index.html)

## LLMs - Strengths and Weaknesses
We keep treating LLMs like reasoning machines — and then act surprised when they confidently get math, logic, or proofs wrong. CTO Robert Ross digs into the limits that rarely make it into the headlines.

Read article→ [Link](/content/blog/llms-strengths-and-weaknesses/index.html)

## Best Practices for Building a Robust Agentic Coding Workflow
CTO Robert Ross explores how to create reliable AI agent-driven development processes with tooling, checkpoints, and feedback loops.

Read article→ [Link](/content/blog/best-practices-agentic-coding-workflow/index.html)

## Podcast: The Risks of Zero-Day Attacks in Open Source Software
CEO Frank Huerta discusses open source security vulnerabilities on The Embedded Frontier Podcast.

Read article→ [Link](/content/blog/risks-zero-day-attacks-open-source/index.html)

## Detecting Security Flaws in Software
Curtail CEO Frank Huerta explains why there is a huge need for automation tools that detect security flaws in software.

Read article→ [Link](/content/blog/detecting-security-flaws-in-software/index.html)

## Predicting the Cybersecurity Landscape of 2023
CEO Frank Huerta shares his outlook for cybersecurity developments expected throughout 2023.

Read article→ [Link](/content/blog/cybersecurity-landscape-2023-predictions/index.html)