OpenVuln

OpenVuln is a service that lets AI find hidden security holes in code repositories for you. It's like hiring a security inspector who walks through an entire building checking every unlocked door and broken window one by one. Instead of a person reading through code line by line, this service automatically finds weaknesses and reports them.

The service runs on GLM-5.3, an open-weight model (a fully finished AI model you can download and use however you like; related term: open-source model) built by the Chinese AI company Z.ai. It's presented as a tool for the defending side—developers who want to find and fix weaknesses in their own websites or programs before anyone else does.

But the same technology can just as easily be turned around to find weaknesses in someone else's systems. That's why tools like this are sometimes called tools that hold both a shield and a spear at once.

In the article, it appears in the sentence: "On the same day, they also released OpenVuln, a service that scans code repositories for vulnerabilities using GLM-5.3." It's worth noting that OpenVuln isn't the AI model GLM-5.3 itself, but a separate security-scanning service built on top of it.