# How we secure Figma's internal systems with agents

DevFeed: [How we secure Figma's internal systems with agents](<https://devfeed.tech/articles/how-we-secure-figma-s-internal-systems-with-agents-9817.md>)

Original publisher: [Read original article](<https://www.figma.com/blog/how-we-secure-figmas-internal-systems-with-agents/>)

Author: Matthew Sullivan; Brad Girardeau

Published: 2026-07-29T20:44:00Z

Content type: article

Language: en

Sources: [Figma Blog](<https://devfeed.tech/sources/figma-blog.md>)

Topics: [AI Agent](<https://devfeed.tech/topics/ai-agent.md>), [Security](<https://devfeed.tech/topics/security.md>), [SIEM, Security](<https://devfeed.tech/topics/siem-security.md>), [cloud-infrastructure](<https://devfeed.tech/topics/cloud-infrastructure.md>), [Amazon Bedrock](<https://devfeed.tech/topics/amazon-bedrock.md>), [Cloud](<https://devfeed.tech/topics/cloud.md>), [Pull Request](<https://devfeed.tech/topics/pull-request.md>), [Code](<https://devfeed.tech/topics/code.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Large Language Model](<https://devfeed.tech/topics/llm.md>)

Tags: [agents](<https://devfeed.tech/tags/agents.md>), [ai-agent](<https://devfeed.tech/tags/ai-agent.md>), [bedrock](<https://devfeed.tech/tags/bedrock.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [cloud-infrastructure](<https://devfeed.tech/tags/cloud-infrastructure.md>), [code](<https://devfeed.tech/tags/code.md>), [llm](<https://devfeed.tech/tags/llm.md>), [pull-request](<https://devfeed.tech/tags/pull-request.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

## AI overview

Figma's security team built an AI agent that triages alerts, investigates incidents, queries security data, writes fixes, opens pull requests, and retains knowledge from prior investigations. The system reduced alert time to resolution by 71% and changed how on-call engineers handle security work.

## Source excerpt

Our security team built an AI agent that triages alerts, conducts forensic investigations, queries our security data lake, writes code to fix issues--and remembers what it learns. Here's how we cut alert time-to-resolution by 71% and fundamentally changed how our on-call engineers work.