{"id":7491,"date":"2025-11-19T14:58:08","date_gmt":"2025-11-19T22:58:08","guid":{"rendered":"https:\/\/objectsecurity.com\/?p=7491"},"modified":"2025-12-04T18:53:17","modified_gmt":"2025-12-05T02:53:17","slug":"agentic_java","status":"publish","type":"post","link":"https:\/\/objectsecurity.com\/agentic_java\/","title":{"rendered":"PRESS RELEASE: ObjectSecurity announces beta release of agentic, conversational AI security Java Analysis"},"content":{"rendered":"

San Diego, CA \u2013 November 19, 2025 \u2013 ObjectSecurity, a leader in defense and industrial cybersecurity and supply chain risk solutions for mission-critical systems, today announced the beta release of its new Agentic Security Java Analysis<\/em> for software vulnerability analysis. part of the Agentic AI Orchestration platform that lets analysts interact naturally with their analysis results and autonomously orchestrates ObjectSecurity\u2019s proven BinLens\u2122 product – which uses symbolic execution to detect memory-safety violations with minimal false positives\u2014along with third-party analysis tools and a range of integrations for red teams, testers, and DevSecOps. Built on technologies funded by the DoD and deployed in high-assurance environments, including nuclear-security applications, this innovation marks a major advance toward more accurate, scalable, and efficient vulnerability analysis.<\/strong><\/p>\n<\/div><\/div><\/div>

Founded in 2000 and headquartered in San Diego, CA, ObjectSecurity is a privately held leader in defense and industrial cybersecurity and supply chain risk solutions for mission-critical systems. The company supports DoD, government, and commercial customers in binary vulnerability analysis, trusted AI, security policy automation, supply chain risk, and 5G vulnerability assessment. Its flagship product, BinLens\u2122, has achieved TRL-9 and is deployed in high-assurance environments, including nuclear-security and other DoD applications. ObjectSecurity\u2019s products are commercialized out of DoD SBIR-funded research and serve DoD, government and commercial customers. ObjectSecurity advances AI-driven software assurance and holds sole-source awardable status on the DoD Platform One and Tradewinds Marketplaces.<\/p>\n<\/div><\/div><\/div>

<\/span><\/div><\/div><\/div>

As software systems and supply chains grow in scale and complexity, traditional security testing methods struggle to keep pace. ObjectSecurity addresses this challenge through advanced software vulnerability analysis that combines AI-driven automation and security orchestration with symbolic analysis paired with static and other analyses for software in binary form, and also for source code. The company\u2019s technologies unify previously siloed tools\u2014such as symbolic execution (related to fuzzing), static analysis etc. \u2014into coordinated, automated workflows that deliver higher coverage and accuracy with minimized manual effort.<\/p>\n

The latest industry momentum around AI-augmented vulnerability testing, autonomous security workflows, and developer-integrated orchestration platforms underscores the growing need for solutions that can reason, prioritize, and act across multiple analysis engines. ObjectSecurity\u2019s new agentic AI platform brings this capability to life, allowing analysts to interact intuitively with complex vulnerability data while the AI agent orchestrates a full suite of underlying tools in real time.<\/p>\n

ObjectSecurity today announced the beta release of its new Agentic Security Java Analysis\u2014a next-generation capability bringing interactive, AI-driven automation to Java based software vulnerability analysis. The platform introduces a natural-language interface that lets analysts query and explore vulnerability data (\u201cshow me the path,\u201d \u201cwhat did we find in this Java file?\u201d) while the agentic AI autonomously orchestrates BinLens\u2122 and integrated static, dynamic, and third-party analyzers. This automated workflow aggregates results, prioritizes findings, and surfaces actionable insights through a developer-friendly interface that streamlines advanced analysis.<\/p>\n<\/div>

In the example video posted on this page, viewers can see the platform analyzing a compiled Java .class file in real time, demonstrating live interaction and multi-tool orchestration (additional features will be showcased in future posts). As the bytecode is parsed, the agent automatically ingests method definitions, class hierarchies, fields, and control-flow constructs to build a semantic understanding of the program. Vulnerability identification runs concurrently, using a range of analysis approaches to flag potential security issues such as deserialization risks, insecure reflection, injection vectors, and incorrect access-control enforcement. Throughout the process, an interactive chat interface enables users to query the agent directly about findings, request deeper inspection of specific code regions or bytecode instructions, or even generate suggested mitigations, all within a continuous, conversational workflow that merges AI-driven insight with human-guided exploration.<\/p>\n<\/div>

<\/lite-youtube><\/div><\/div>
\n

\u201cAs software assurance ecosystems evolve, the ability to intelligently orchestrate diverse analysis engines and data sources has become a strategic necessity,\u201d said Dr. Ulrich Lang, CEO of ObjectSecurity. \u201cOur new analysis introduces an agentic layer that enables flexible, conversational interaction with vulnerability analysis and automates the end-to-end scanning of Java codebases and binaries. This advancement accelerates insight, strengthens decision support, and redefines how analysts and developers engage with complex security workflows.\u201d<\/p>\n<\/div><\/div><\/span><\/blockquote>

<\/span>Dr. Ulrich Lang<\/strong>, <\/span>ObjectSecurity LLC<\/span><\/span><\/div><\/div><\/div><\/div>

ObjectSecurity\u2019s Agentic Security Java Analysis is currently offered in preview to select customers ahead of its full commercial release. Development has been supported through multiple Small Business Innovation Research (SBIR) programs, including funding from the Defense Threat Reduction Agency (DTRA), Office of Naval Research (ONR), Army DEVCOM, DARPA and other U.S. Department of Defense organizations. Interested government and industry partners are invited to contact ObjectSecurity for early access, demonstrations, or collaborative research engagements. With over two decades of innovation in software vulnerability analysis and AI-augmented assurance tools, ObjectSecurity continues to lead the advancement of automated, high-accuracy cybersecurity solutions for defense, government, and critical infrastructure. For more information about the Agentic AI Orchestration Platform and BinLens\u2122, visit objectsecurity.com.<\/p>\n

About ObjectSecurity<\/strong><\/p>\n

Founded in 2000 and headquartered in San Diego, California, ObjectSecurity LLC develops advanced cybersecurity, AI and supply chain risk solutions that protect mission-critical systems across defense, industrial, and infrastructure sectors. The company\u2019s products – many originating from DoD SBIR deep-tech research and related programs – deliver precision vulnerability detection, trusted AI, and automated assurance for complex software and hardware ecosystems.<\/p>\n

More Information<\/strong><\/p>\n