Cyber Chaos Monkey：借助AI智能体保持对安全威胁的领先
We're obsessed with protecting merchant and buyer data. We reinvent our security programs relentlessly, throwing away what doesn't keep pace with the evolving landscape and challenging ourselves to multiply both the depth and coverage of our capabilities with AI.
我们痴迷于保护商户和买家数据。我们坚持不懈地重塑我们的安全计划，舍弃那些无法跟上不断演变形势的部分，并挑战自己用 AI 让我们的能力在深度和覆盖范围上都成倍增长。
Earlier in 2026, we described our agentic approach to discovering and fixing vulnerabilities in our software. Since then, we've developed an agentic vulnerability hunter that runs live against our production infrastructure. We hand this system live credentials and every possible thing we know about the system (like bugs, infrastructure, and source), then steer it using the most capable cyber models available to find novel ways to bypass our safeguards.
2026 年早些时候，我们描述了我们用于发现并修复软件漏洞的智能体方法。自那以后，我们开发了一个智能体漏洞猎手，它直接在我们的生产基础设施上运行。我们向该系统提供线上凭据，以及我们所知道的关于该系统的一切可能信息（例如漏洞、基础设施和源代码），然后使用现有最强大的网络模型来引导它，寻找绕过我们防护措施的新方法。
So far, our agents have executed tens of thousands of offensive engagements, identified and acted on dozens of impactful findings, without causing an outage or incident. We call this system the Cyber Chaos Monkey (CCM), and here's how we built it.
到目前为止，我们的智能体已经执行了数万次攻击性演练，识别并处理了数十个有影响力的发现，而没有造成任何中断或事故。我们将这个系统称为 Cyber Chaos Monkey（CCM），以下是我们如何构建它的。
Finding vulnerabilities before attackers
在攻击者之前发现漏洞
Across the industry, we’ve seen an explosion in vulnerability reports as frontier models drive the cost of vulnerability discovery towards zero.
在整个行业中，随着前沿模型将漏洞发现成本推向零，我们看到了漏洞报告的爆发式增长。
We see evidence of this in Shopify’s bug bounty program, which has seen almost a 300% increase in reports since 2024. Needing to review, validate, and act on this volume of reports makes the program much harder to operate.
我们在 Shopify 的 漏洞赏金计划中看到了这方面的证据，自 2024 年以来，该计划的报告数量几乎增长了 300%。需要审查、验证并处理如此数量的报告，使得该计划的操作难度大大增加。
Our hypothesis is that, although frontier models give our adversaries unprecedented capabilities, those models are a rising tide that lifts all boats. We believe that, since we have a ...