{ "title": "Detectify launches MCP Server to secure the autonomous coding loop", "modified_at": "2026-05-26 13:21:23", "published_at": "2026-05-26 13:00:00", "url": "https://newsroom.detectify.com/detectify-launches-mcp-server-to-secure-the-autonomous-coding-loop", "short_url": "http://prez.ly/IiHd", "culture": "en", "language": "EN", "subtitle": "As AI agents take over the software lifecycle, Detectify\u2019s paradigm shift in AppSec embeds continuous, autonomous security validation directly into the fast-paced development loop.", "slug": "detectify-launches-mcp-server-to-secure-the-autonomous-coding-loop", "body": "

STOCKHOLM, Sweden (May 26th, 2026) Detectify, the Swedish application security platform built and trusted by hackers, today announced the launch of the Detectify MCP (Model Context Protocol) Server, a new integration layer that brings Detectify’s security testing engines directly into AI-driven development workflows, helping coding agents find and validate exploitable vulnerabilities and interpret attack surface data with unprecedented precision.

As organizations increasingly rely on AI agents to write, refactor, and modernize code, software production is accelerating faster than many security teams can realistically review or govern. Whether through official engineering initiatives or shadow AI adoption by developers eager to speed up work, AI-assisted development can help eliminate some common coding mistakes. It is also dramatically increasing the volume of software, services, APIs, and infrastructure organizations must continuously track and secure. The result is a growing visibility and governance challenge, compounded by shadow IT and shadow AI adoption, where organizations may write cleaner code while simultaneously losing track of what they are deploying and exposing.

The Detectify MCP Server is designed to close that gap by giving AI agents a standardized way to augment development and security workflows with AI-assisted access to Detectify findings and capabilities, \u200b allowing them to access and act on real-time security findings as part of autonomous development workflows. Rather than relying on periodic reviews or delayed security handoffs, organizations can embed continuous validation more directly into the software delivery process as code, infrastructure, and services evolve.

Key MCP Server capabilities include:

"We aren't competing with the AI’s reasoning; we are providing the professional-grade tools that reasoning requires," says Rickard Carlsson, CEO of Detectify. "By structuring our capabilities as modular, high-performance building blocks, we allow agents to call our scanner as naturally as they call a test runner. We are expanding from a dashboard humans check to a skill agents orchestrate."

Traditional application security workflows were built around slower development cycles, where human review and periodic testing could reasonably keep pace with software delivery. In modern AI-assisted environments, those assumptions are increasingly breaking down as code, infrastructure, and services evolve continuously.

The launch reflects a broader shift in AppSec toward continuous, real-time security validation. While LLMs excel at reasoning, frontier models operate at a speed and cost-profile that makes large-scale security testing impossible. Detectify solves this by monitoring millions of changing domains using compiled, deterministic code, while the MCP Server combines that scale with agentic workflows to help security operate at the same velocity as engineering.

“AI systems are probabilistic by nature. Security validation cannot be. Agents still need deterministic, trustworthy ways to verify whether something is actually exploitable before software reaches production,” Carlsson continued.

As AI-assisted development continues to accelerate engineering velocity, organizations face increasing pressure to move beyond one-time security reviews and maintain continuous visibility into what exists across their attack surface.

The Detectify MCP Server will be available soon as part of Detectify’s continued investment in AI-native application security. For more information, visit Detectify.com.

About Detectify
\u200bFounded by ethical hackers in 2013, Stockholm-based Detectify is an application security platform trusted by over 2,100 organizations globally, from high-growth startups to the world’s largest enterprises and public institutions. Detectify equips modern security teams with clarity and control over their attack surface. Fueled by real-world validated payloads from its global community of elite ethical hackers and scaled through its own AI-driven engines, Detectify enables organizations and their agents to identify and fix truly exploitable vulnerabilities before attackers do.


\u200bMedia Contacts

\n
\"Jorge
\n
\n Jorge Vicente\n Global Brand & Communications Manager, Detectify\n \n
\n
\n
\"Rachel
\n
\n Rachel McIntosh\n San Francisco PR for Detectify\n \n
\n
", "header": { "large": "https://cdn.uc.assets.prezly.com/98ba0a94-4a1d-4348-a280-af0488d5f25b/-/preview/1200x1200/-/format/auto/", "release": "https://cdn.uc.assets.prezly.com/98ba0a94-4a1d-4348-a280-af0488d5f25b/-/preview/1200x1200/-/format/auto/" }, "contacts": [ { "name": "Jorge Vicente", "company": "Detectify", "description": "Global Brand & Communications Manager", "email": "jorge.vicente@detectify.com", "website": null, "address": null, "telephone": "+46761146350", "mobile": null, "twitter": null, "facebook": null }, { "name": "Rachel McIntosh", "company": "San Francisco PR for Detectify", "description": null, "email": "detectify-team@sanfrancisco.fi", "website": null, "address": null, "telephone": null, "mobile": null, "twitter": null, "facebook": null } ], "author": { "first_name": "Jorge", "last_name": "Vicente" }, "format_version": 5 }