# How Figma stays ahead of vulnerabilities with agents

DevFeed: [How Figma stays ahead of vulnerabilities with agents](<https://devfeed.tech/articles/how-figma-stays-ahead-of-vulnerabilities-with-agents-9766.md>)

Original publisher: [Read original article](<https://www.figma.com/blog/how-figma-stays-ahead-of-vulnerabilities-with-agents/>)

Author: Rohan Sharma; Liam Buchan; Dave Martin

Published: 2026-07-23T21:23:00Z

Content type: article

Language: en

Sources: [Figma Blog](<https://devfeed.tech/sources/figma-blog.md>)

Topics: [Figma](<https://devfeed.tech/topics/figma.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Pull Request](<https://devfeed.tech/topics/pull-request.md>), [AI-assisted coding](<https://devfeed.tech/topics/ai-assisted-coding.md>), [Claude Code](<https://devfeed.tech/topics/claude-code.md>), [codex](<https://devfeed.tech/topics/codex.md>), [Security](<https://devfeed.tech/topics/security.md>), [Code](<https://devfeed.tech/topics/code.md>)

Tags: [agentic](<https://devfeed.tech/tags/agentic.md>), [claude](<https://devfeed.tech/tags/claude.md>), [claude-code](<https://devfeed.tech/tags/claude-code.md>), [code-generation](<https://devfeed.tech/tags/code-generation.md>), [codex](<https://devfeed.tech/tags/codex.md>), [coding](<https://devfeed.tech/tags/coding.md>), [cost](<https://devfeed.tech/tags/cost.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [figma](<https://devfeed.tech/tags/figma.md>), [pull-request](<https://devfeed.tech/tags/pull-request.md>), [review](<https://devfeed.tech/tags/review.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

## AI overview

Figma describes how it uses coding agents to prevent, detect, and fix vulnerabilities during code generation, pull request review, and historical code auditing. The article focuses on improving precision, recall, and trust, including a review system that combines Claude Code with Opus 4.8 and Codex with GPT-5.6 Sol.

## Source excerpt

For the past year, agents at Figma have guarded code as it's written, reviewed every pull request, and audited a decade-old monorepo, all on one policy.