Twitter/X

Bolt.new has integrated an agentic security reviewer into the publish button that…

Brief

Bolt.new has added an agentic security engineer directly into its publish workflow: pressing publish now runs an automated scan, applies patches, verifies the build, and ships it in one step. Launched 2026-07-31 and marketed as free with no token use, the SoTA feature targets solo builders who typically defer security reviews and aims to make skipping security more difficult than performing it.

Why it matters

Bolt.new has integrated an agentic security reviewer into the publish button that scans, patches, verifies, and ships a build in one action.

Key details

  • The feature is free (no tokens used) and presented as state-of-the-art (SoTA) agentic security, aimed at solo builders who often postpone security reviews.
  • Bolt announced the rollout on 2026-07-31, positioning the tool as making it harder to skip security than to run it, and arguing AI sped up attackers as well as builders.
Source evidence

Security review was always the thing you'd get to later.

Later never comes for solo builders.

Bolt. new put it inside the publish button. The agent scans, patches, verifies the build and ships in one action. Free, no tokens touched.

Now skipping it takes more effort than doing it

Video

bolt.new (@boltdotnew)

Today we're shipping a security engineer into every Bolt project.

AI made building faster. It made attackers faster too.

So we’ve made SoTA agentic security the default. For free. 🧵

Video

— https://nitter.net/boltdotnew/status/2083205470559650260#m