Cognition is acquiring Corridor and bringing its team into Devin, the AI software engineer, so customers can find and fix vulnerabilities in agent-written code and in systems already in production. The launch is aimed at engineering and security teams that use coding agents and need those checks during development as well as against older findings. Both companies describe the moment as urgent because autonomous agents can execute complete attack chains, and because known weaknesses remain in software that is already running. Corridor co-founders Jack Cable and Ashwin Ramaswami, who previously worked at the Cybersecurity and Infrastructure Security Agency, built a security layer for teams that develop software with AI coding tools. The product returns guardrails inside agents such as Cursor, Claude Code, and Codex before a change is committed, reviews pull requests against a severity policy that can block a merge, and opens fixes for findings already in the backlog. Cable and Ramaswami are joining Cognition to extend Devin Security alongside president Russell Kaplan, chief security officer Alex Stamos, and CTO Steven Hao. In the launch video they describe fixing vulnerabilities as software engineering work that an agent can run at scale on code that already exists.