Devin Security Upgrade Brings Claude Mythos Deep Scans and Enterprise Credits

Cognition says that on October 26, 2026, it launched two initiatives for software teams' security posture: a major upgrade to Devin Security, and a commitment of hundreds of millions of dollars in Devin credits. Devin Security finds, prioritizes, and remediates vulnerabilities end to end. For related Devin product context on the site, see Devin Fusion Scores 68.2 on Artificial Analysis Coding Agent Index, Level With Claude Code and Muse Code.

Deep Scan with Claude Mythos and frontier cyber models

Deep scans are now powered by Claude Mythos and other frontier cyber models. Per Cognition, enterprise security teams can use these capabilities through Devin without needing separate access to the models. The post also states that Devin Security is model-neutral—one managed product that can use the best cyber-capable models across labs as they improve.

Deep scans are framed as a way to uncover complex chained exploits across large codebases. Devin can also ingest findings via API and integrations from existing scanners, bug bounties, and advisories, remove duplicates, and re-verify them with frontier models.

Threat model and prioritization

Devin Security builds a living, custom threat model with the security and engineering team. That shared document maps systems, services, hosts, how they communicate, network policies, deployment context, and business impact questions the team supplies.

Findings from Devin's own scans and other tools are then evaluated against that threat model and re-scored by exploitability and potential damage in the environment, so teams can see what needs fixing now, what can wait, and what may warrant a documented risk adjustment.

Parallel VM remediation

Because Devin is cloud-native, Cognition says it can write, validate, and end-to-end test large-scale fixes on real VMs running real services in parallel. Each session has its own virtual machine; the post cites thousands of parallel sessions that can reproduce a vulnerability, write a fix, run reproduction and existing tests, and open a PR with evidence.

Devin credits for free frontier scans and remediation

Alongside the product upgrade, Cognition is committing hundreds of millions of dollars in Devin credits: free scans with frontier cyber models, plus remediation credits so enterprises can find and fix critical vulnerabilities. New customers can also receive remediation credits; Cognition says its team will work alongside customers through investigation and remediation. For Devin plan-side usage mechanics on the site, see Devin ChatGPT Token Sharing: Bill GPT Usage to Your Plan. For another deep-scan credit style offer in the same week's coverage, see CodeRabbit Covers Up to $5,000 in Deep Scan Usage Through November 8.