Cisco Unveils Agentic AI Framework to Address AI's Bug Detection Errors

US-based computer networking and cybersecurity firm Cisco has introduced Foundry Security Spec. Foundry Security Spec is a proven framework for building agentic AI-based security evaluation systems, released as open-source software. This blueprint is designed to assist organisations in building AI-powered software security evaluation systems. The solution addresses a growing challenge in cybersecurity as AI usage increases: inaccurate or unverifiable bug findings. Generative AI models and large language models (LLMs) are increasingly used to identify software vulnerabilities. However, Cisco notes current approaches have significant shortcomings. Results often consist of unstructured findings, mixing valid analysis with false positives, with no clear way to confirm complete coverage or when the evaluation process is truly complete. Cisco states this makes AI appear more as a technological showcase than a reliable security evaluation system for corporate security teams and auditors. “By sharing our learned knowledge, we aim to help the security defender community move faster and smarter,” said Omar Santos, Cisco’s Distinguished Engineer for AI Security Engineering in S&TO, in an official statement. “Organisations will no longer be bogged down by numerous notifications but can focus on verifiable security findings with real impact,” he added. Although announced as an open-source project, Foundry Security Spec is not a ready-to-use security application or scanner. Cisco explained that Foundry is a reference specification or blueprint organisations can use to build their own AI-based security evaluation systems tailored to their needs. Simply put, while ready-to-use security tools are like finished houses, Foundry Security Spec is akin to a detailed architectural blueprint showing how to build them. Being model-agnostic and stack-agnostic, the specification can be used with various AI models and software infrastructures, meaning organisations do not need to adopt a specific AI model. Cisco designed Foundry to work with GitHub Spec-Kit, a widely adopted industry specification-based development workflow.