ARXIV:2602.03012 · CODE SECURITY AUTOMATION · SUBMITTED 02 APR · 02:30 UTC · FRESHNESS STALE

VerifiedSource: PDF linkedPartialPaperPack: 3 of 4 citation fields filledMissingMissing fields: authorsPartialProof: unverified proof status

CVE-Factory: Scaling Expert-Level Agentic Tasks for Code Security Vulnerability

Q: What products could be built from this research?

CVE-Factory can be developed into a cloud-based service that automatically produces verified security task kits from known vulnerabilities, assisting companies in quickly resolving security issues with minimal manual intervention.

Q: What are the practical use cases?

Develop a SaaS platform offering automated vulnerability assessment and repair tasks to DevSecOps teams, enhancing their ability to quickly patch and verify security issues in large codebases.

Q: What industries could this research disrupt?

Replaces traditional manual vulnerability reproduction and repair tasks, rendering many current slow and expensive methodologies obsolete, especially in environments demanding urgent security updates.

arXiv

CVE-Factory transforms CVE metadata into automated, expert-level code security tasks.

Blocked on Code›Score7.0Evidence unverified

Opportunity summary

Pain CVE-Factory transforms CVE metadata into automated, expert-level code security tasks.

Evidence 0 refs | 0 sources | 17% coverage

Blocker Evidence unverified

Open Build Read PDF Signal Canvas Track

PROBLEM

CVE-Factory transforms CVE metadata into automated, expert-level code security tasks. However, existing works rely on costly, unscalable manual reproduction and suffer from outdated data distributions.

METHOD

Full abstract

Evaluating and improving the security capabilities of code agents requires high-quality, executable vulnerability tasks. However, existing works rely on costly, unscalable manual reproduction and suffer from outdated data distributions. To address these, we present CVE-Factory, the first multi-agent framework to achieve expert-level quality in automatically transforming sparse CVE metadata into fully executable agentic tasks. Cross-validation against human expert reproductions shows that CVE-Factory achieves 95\% solution correctness and 96\% environment fidelity, confirming its expert-level quality. It is also evaluated on the latest realistic vulnerabilities and achieves a 66.2\% verified success. This automation enables two downstream contributions. First, we construct LiveCVEBench, a continuously updated benchmark of 190 tasks spanning 14 languages and 153 repositories that captures emerging threats including AI-tooling vulnerabilities. Second, we synthesize over 1,000 executable training environments, the first large-scale scaling of agentic tasks in code security. Fine-tuned Qwen3-32B improves from 5.3\% to 35.8\% on LiveCVEBench, surpassing Claude 4.5 Sonnet, with gains generalizing to Terminal Bench (12.5\% to 31.3\%). We open-source CVE-Factory, LiveCVEBench, Abacus-cve (fine-tuned model), training dataset, and leaderboard. All resources are available at https://github.com/livecvebench/CVE-Factory .

RESULT

ScienceToStartup currently rates this 7.0/10 on the public viability pass. To address these, we present CVE-Factory, the first multi-agent framework to achieve expert-level quality in automatically transforming sparse CVE metadata into fully executable agentic…

WHY NOW

Code Security Automation moved forward this cycle; last verified April 2026. Public score 7.0/10.

Continue into Read for claims, analysis, references, and neighboring papers.

Opportunity summary

Score7.0

PainCVE-Factory transforms CVE metadata into automated, expert-level code security tasks.

Evidence0 refs | 0 sources | 17% coverage

Blockermissing authors

Analysis summary

CVE-Factory transforms CVE metadata into automated, expert-level code security tasks.

VerifiedSource: PDF linkedPartialPaperPack: 3 of 4 citation fields filledMissingMissing fields: authorsPartialProof: unverified proof status

ARXIV:2602.03012 · CODE SECURITY AUTOMATION · SUBMITTED 02 APR · 02:30 UTC · FRESHNESS STALE

VerifiedSource: PDF linkedPartialPaperPack: 3 of 4 citation fields filledMissingMissing fields: authorsPartialProof: unverified proof status

CVE-Factory: Scaling Expert-Level Agentic Tasks for Code Security Vulnerability

arXiv

CVE-Factory transforms CVE metadata into automated, expert-level code security tasks.

Blocked on Code›Score7.0Evidence unverified

Opportunity summary

Pain CVE-Factory transforms CVE metadata into automated, expert-level code security tasks.

Evidence 0 refs | 0 sources | 17% coverage

Blocker Evidence unverified

Open Build Read PDF Signal Canvas Track

PROBLEM

METHOD

Full abstract

RESULT

WHY NOW

Code Security Automation moved forward this cycle; last verified April 2026. Public score 7.0/10.

Continue into Read for claims, analysis, references, and neighboring papers.

Opportunity summary

Score7.0

PainCVE-Factory transforms CVE metadata into automated, expert-level code security tasks.

Evidence0 refs | 0 sources | 17% coverage

Blockermissing authors

Analysis summary

CVE-Factory transforms CVE metadata into automated, expert-level code security tasks.

VerifiedSource: PDF linkedPartialPaperPack: 3 of 4 citation fields filledMissingMissing fields: authorsPartialProof: unverified proof status

Paper Pack

10.48550/arXiv.2602.03012

CVE-Factory: Scaling Expert-Level Agentic Tasks for Code Security Vulnerability

CVE-Factory transforms CVE metadata into automated, expert-level code security tasks.

Abstract

Source availability

PDF linked

The paper record includes a public PDF URL.

Extraction status

Derived fallback

Read summaries are estimated from adjacent metadata, not verified extraction rows.

Proof status

unverified

0 refs; 0 sources; 17% coverage.

What was readable

linkedon filenot materializedderived fallback30 indexednot indexed

Derived fallback: Estimated from adjacent evidence; not verified from source.

Viability

7.0

Time to MVP

MVP estimate missing

Commercial

No commercial flags on file

Export

Preparing verified analysis

lens / founder

PROBLEM

METHOD

RESULT

WHY NOW

Code Security Automation moved forward this cycle; last verified April 2026. Public score 7.0/10.

Claim map

Abstract-backed public claims while anchored extraction refreshes.

Strong 0Mixed 0Weak 4

Evidencepartial
CVE-Factory transforms CVE metadata into automated, expert-level code security tasks. However, existing works rely on costly, unscalable manual reproduction and suffer from outdated data distributions.
Implicationpartial
Abstract-backed fallback claim; anchored extraction has not materialized a public claim row yet.
Verificationpartial
partial
Evidencepartial
Evaluating and improving the security capabilities of code agents requires high-quality, executable vulnerability tasks. However, existing works rely on costly, unscalable manual reproduction and suffer from outdated data distributions.
Implicationpartial
Abstract-backed fallback claim; anchored extraction has not materialized a public claim row yet.
Verificationpartial
partial
Evidencepartial
ScienceToStartup currently rates this 7.0/10 on the public viability pass. To address these, we present CVE-Factory, the first multi-agent framework to achieve expert-level quality in automatically transforming sparse CVE metadata into fully executable agentic tasks.
Implicationpartial
Abstract-backed fallback claim; anchored extraction has not materialized a public claim row yet.
Verificationpartial
partial
Evidencepartial
Code Security Automation moved forward this cycle; last verified April 2026. Public score 7.0/10.
Implicationpartial
Abstract-backed fallback claim; anchored extraction has not materialized a public claim row yet.
Verificationpartial
partial

Constellation map

Paper-native neighborhood for concepts, methods, materials, markets, and competitors. Missing lanes stay labeled instead of disappearing behind commercialization gates.

Open full Signal Canvas

Concepts

not indexed

Methods

Materials

PDF linked

Markets

Code Security Automation

Competitors

not indexed

Competitive landscape

CVE-Factory transforms CVE metadata into automated, expert-level code security tasks.

Segment

Code Security Automation

Adoption evidence

No public code link in the paper record yet

Commercial read

7.0/10 public viability

Direct

not classified

Adjacent

not classified

Substitute

not classified

Unknown

not classified

Buzz

No indexed public discussion is attached to 2602.03012 yet. That is a visibility signal, not a blank module: the monitor is watching the public channels below.

Hacker News

Not indexed yet

Bluesky

Not indexed yet

PDF

Preview the source document here, or use the hero PDF action for a new tab.

References(30)

Reference metadata pending (4d41fff4387e15e920b4fd020a6ad9f09828281a)

Reference metadata pending (5349cb63cf8d6bd7b84ba56f37290b1b3db021b3)

Reference metadata pending (37773e557d7e1666bb1472c70faf1c22f19938e6)

Reference metadata pending (611610c57dc08a76db23613f51f0cc520af5b404)

Reference metadata pending (b6de3c2ccd55ce5d324b749660a03cb90a3b9d2b)

Reference metadata pending (1c3b90db450290040aa2d22e1e1442ea9d18553f)

Reference metadata pending (b6266adf848d7d5fbb9082f223a969a83eb6d416)

Reference metadata pending (319694295cc5f57d119bbc460ed77d1c35c83680)

Reference metadata pending (d29924cd78cfbc51dd6770a40284d7a62dc9837e)

Reference metadata pending (5c29ce07433679fc5e2a5bed83d3a80464b966e6)

Reference metadata pending (095b31dfaa032a2daf13da21bd4d04dddb2097fa)

Reference metadata pending (4136b603d6d6e7b591926e1a52d8667bc96d3052)

Reference metadata pending (5f4efbe3aae1d8f44ceab1da257ae685d6beb00b)

Reference metadata pending (8d064f58dd2374f9b702716f75d7ab58485f8eef)

Reference metadata pending (342ff7d167825e0024023ad72613682ddb7d0f0c)

Reference metadata pending (e0ba6692e80867aad20bc8d90dcceb9c32f072d3)

Reference metadata pending (08f53d20666077f3398cf23c598e5e42fb01aa94)

Reference metadata pending (e5bd79d935e63e6a70b6c5dd5f68ae7b170fbf6e)

Reference metadata pending (30e13e65d68a195ab6748da16e2a015756d4ca7b)

Reference metadata pending (f1d7a4ed38192f156e77cde0785093cc0b66259e)

Showing 20 of 30 references

CITED BY

No citing papers are indexed in the public S2S graph yet. This is an explicit zero-signal state, not a hidden lookup.

Foundation

Prior WorkFORGE: Multi-Agent Graduated Exploitation and Detection Engineering

7.0

Prior WorkMOSAIC-Bench: Measuring Compositional Vulnerability Induction in Coding Agents

7.0

Prior WorkVulnScout-C: A Lightweight Transformer for C Code Vulnerability Detection

7.0

Prior WorkAXE: An Agentic eXploit Engine for Confirming Zero-Day Vulnerability Reports

7.0

Prior WorkTowards Optimal Agentic Architectures for Offensive Security Tasks

7.0

Prior WorkFrom Controlled to the Wild: Evaluation of Pentesting Agents for the Real-World

7.0

Prior WorkExploitBench: A Capability Ladder Benchmark for LLM Cybersecurity Agents

7.0

Extension

Builds On ThisToward Scalable Automated Repository-Level Datasets for Software Vulnerability Detection

5.0

Builds On ThisBroken by Default: A Formal Verification Study of Security Vulnerabilities in AI-Generated Code

4.0

Commercially relevant

Higher ViabilityRe-Evaluating EVMBench: Are AI Agents Ready for Smart Contract Security?

8.0

Conflicting

none indexed

Owned Distribution

Subscribe to the weekly brief

Get the weekly shortlist of commercializable papers, benchmark movers, and proof receipts that matter for product execution.

Agent drawer

5 surfaces preserved for agents. Humans can ignore.

Developer contracts, payload previews, evidence maps, and run controls stay here instead of the Read, Build, and Track workspace.

Run context

Paper: 2602.03012
Route: /paper/cve-factory-scaling-expert-level-agentic-tasks-for-code-security-vulnerability
Active tab: read
Artifact: cve-factory-scaling-expert-level-agentic-tasks-for-code-security-vulnerability

Available agents

Read extractor
Build planner
Track monitor
Competitive mapper
Related-paper scout

API/MCP endpoints

REST paper pack API/api/v1/paper/cve-factory-scaling-expert-level-agentic-tasks-for-code-security-vulnerability/paper-pack
REST build passport API/api/v1/paper/cve-factory-scaling-expert-level-agentic-tasks-for-code-security-vulnerability/build-passport
REST OpenAPI/api/openapi.json
MCP descriptor/api/mcp
MCP resourcesciencetostartup://surfaces/paper-workspace

Tool contracts

paper_packbuild_passportopportunity_kernelforesightsource_proofevidence_state

Payload preview

Inspect payload

{
  "contract_version": "paper-r2",
  "paper_id": "8c234d9c-5d0d-4819-a127-464472154929",
  "arxiv_id": "2602.03012",
  "canonical_route": "/paper/cve-factory-scaling-expert-level-agentic-tasks-for-code-security-vulnerability",
  "active_tab": "synced from current hash by the drawer client",
  "selected_artifact": "cve-factory-scaling-expert-level-agentic-tasks-for-code-security-vulnerability",
  "endpoints": {
    "paper_pack": "/api/v1/paper/cve-factory-scaling-expert-level-agentic-tasks-for-code-security-vulnerability/paper-pack",
    "build_passport": "/api/v1/paper/cve-factory-scaling-expert-level-agentic-tasks-for-code-security-vulnerability/build-passport",
    "mcp_resource": "sciencetostartup://surfaces/paper-workspace"
  }
}

Schema validation

paper-r2 contract: present
JSON-LD twin: SSR emitted
OpenAPI path parity: /api/openapi.json
MCP resource parity: paper-workspace

Job trace

queued: drawer opened by user action
running: inspect or copy payload
succeeded: payload available in SSR
failed: route errors appear in evidence cards

Evidence map

sources used: page freshness, source proof anchors, JSON-LD
missing sources: exposed by PaperPack and EvidenceState chips
derived fallbacks: marked unverified before handoff

Page Freshness

Canonical route, proof status, last verified, refs, sources, and coverage.

Page Freshness

Paper proof surface

Canonical route: /paper/cve-factory-scaling-expert-level-agentic-tasks-for-code-security-vulnerability

stale

Proof freshness: stale
Proof status: unverified
Display score: 7/10
Last proof check: 2026-04-02
Score updated: 2026-04-02
Score fresh until: 2026-05-02
References: 0
Source count: 0
Coverage: 17%

This page is showing the last landed evidence receipt and score bundle because the latest proof data is outside the freshness window.

OpenAlex: pending — this preprint is not yet indexed by OpenAlex.

Agent Handoff

Endpoint list, payload shape, route context, and copyable handoff data.

Agent Handoff

CVE-Factory: Scaling Expert-Level Agentic Tasks for Code Security Vulnerability

Canonical ID cve-factory-scaling-expert-level-agentic-tasks-for-code-security-vulnerability | Route /paper/cve-factory-scaling-expert-level-agentic-tasks-for-code-security-vulnerability

REST example

curl https://sciencetostartup.com/api/v1/agent-handoff/paper/cve-factory-scaling-expert-level-agentic-tasks-for-code-security-vulnerability

MCP example

{
  "tool": "get_paper",
  "arguments": {
    "arxiv_id": "2602.03012"
  }
}

source_context

{
  "surface": "paper",
  "mode": "paper",
  "query": "CVE-Factory: Scaling Expert-Level Agentic Tasks for Code Security Vulnerability",
  "normalized_query": "2602.03012",
  "route": "/paper/cve-factory-scaling-expert-level-agentic-tasks-for-code-security-vulnerability",
  "paper_ref": "cve-factory-scaling-expert-level-agentic-tasks-for-code-security-vulnerability",
  "topic_slug": null,
  "benchmark_ref": null,
  "dataset_ref": null
}

Buildability Receipt

Verdict, compute envelope, blockers, signature state, and receipt links.

Paper proof page receipt window

Watch and verify: CVE-Factory: Scaling Expert-Level Agentic Tasks for Code Security Vulnerability

/buildability/cve-factory-scaling-expert-level-agentic-tasks-for-code-security-vulnerability

Watchwatch

Subject: CVE-Factory: Scaling Expert-Level Agentic Tasks for Code Security Vulnerability

Verdict

Watch

Verdict is Watch because viability or proof quality is intermediate and should be re-evaluated before execution.

Time to first demo

Insufficient data

No first-demo timestamp, owner estimate, or elapsed demo receipt is attached to this surface.

Compute envelope

Structured compute envelope

Insufficient data

No data, compute, hardware, memory, latency, dependency, or serving requirement receipt is attached.

Evidence ids

Receipt path

/buildability/cve-factory-scaling-expert-level-agentic-tasks-for-code-security-vulnerability

Paper ref

cve-factory-scaling-expert-level-agentic-tasks-for-code-security-vulnerability

arXiv id

2602.03012

Freshness

Generated at

2026-04-02T02:30:40.136Z

Evidence freshness

stale

Last verification

2026-04-02T02:30:40.136Z

Sources

References

Coverage

17%

Hash state

Lineage hash

c23c6723b1a74adc45c022b6f5913466229f32e3080ab2ec3db5254ef3c1323b

Canonical opportunity-kernel lineage hash.

Signature state

External signature

unsigned_external

No founder, registry, pilot, or production-adoption signature is attached to this receipt.

Verification

not_verified

Verification is blocked until an external signature is provided.

Blockers

Missing: repo_url
Missing: references
Missing: proof_status
Missing: distribution_readiness_scores
Missing: paper_extraction_scorecards
Unknown: distribution readiness has not been computed yet
Unknown: proof verification has not been recorded yet

Verification pending / evidence receipt incomplete

repo_url

references

Missing proof, requirement, signature, approval, adoption, or telemetry fields are blockers and must not be inferred.

Open receipt API receipt Build Loop Signal Canvas Proof divergence Divergence API Brier outcomes API

Source Proof anchors

Visual citations from the paper document graph.

JSON-LD twin

The application/ld+json payload rendered for agents.

{
  "@context": "https://schema.org",
  "@graph": [
    {
      "@type": "WebPage",
      "@id": "https://sciencetostartup.com/paper/cve-factory-scaling-expert-level-agentic-tasks-for-code-security-vulnerability#webpage",
      "url": "https://sciencetostartup.com/paper/cve-factory-scaling-expert-level-agentic-tasks-for-code-security-vulnerability",
      "name": "CVE-Factory: Scaling Expert-Level Agentic Tasks for Code Security Vulnerability",
      "description": "CVE-Factory transforms CVE metadata into automated, expert-level code security tasks.",
      "isPartOf": {
        "@id": "https://sciencetostartup.com/#website"
      }
    },
    {
      "@type": "ScholarlyArticle",
      "@id": "https://sciencetostartup.com/paper/cve-factory-scaling-expert-level-agentic-tasks-for-code-security-vulnerability#scholarlyArticle",
      "headline": "CVE-Factory: Scaling Expert-Level Agentic Tasks for Code Security Vulnerability",
      "description": "CVE-Factory transforms CVE metadata into automated, expert-level code security tasks.",
      "url": "https://sciencetostartup.com/paper/cve-factory-scaling-expert-level-agentic-tasks-for-code-security-vulnerability",
      "sameAs": "https://arxiv.org/abs/2602.03012",
      "identifier": {
        "@type": "PropertyValue",
        "propertyID": "arXiv",
        "value": "2602.03012"
      },
      "isAccessibleForFree": true,
      "isPartOf": {
        "@id": "https://sciencetostartup.com/#website"
      },
      "datePublished": "2026-02-03T02:27:16.000Z",
      "author": [
        {
          "@type": "Person",
          "name": "Xianzhen Luo",
          "affiliation": {
            "@type": "Organization",
            "name": "Harbin Institute of Technology"
          }
        },
        {
          "@type": "Person",
          "name": "Jingyuan Zhang",
          "affiliation": {
            "@type": "Organization",
            "name": "Kuaishou Technology"
          }
        },
        {
          "@type": "Person",
          "name": "Shiqi Zhou",
          "affiliation": {
            "@type": "Organization",
            "name": "Harbin Institute of Technology"
          }
        },
        {
          "@type": "Person",
          "name": "Rain Huang",
          "affiliation": {
            "@type": "Organization",
            "name": "Harbin Institute of Technology"
          }
        },
        {
          "@type": "Person",
          "name": "Chuan Xiao",
          "affiliation": {
            "@type": "Organization",
            "name": "Harbin Institute of Technology"
          }
        },
        {
          "@type": "Person",
          "name": "Qingfu Zhu",
          "affiliation": {
            "@type": "Organization",
            "name": "Harbin Institute of Technology"
          }
        },
        {
          "@type": "Person",
          "name": "Zhiyuan Ma"
        },
        {
          "@type": "Person",
          "name": "Xing Yue",
          "affiliation": {
            "@type": "Organization",
            "name": "Kuaishou Technology"
          }
        },
        {
          "@type": "Person",
          "name": "Yang Yue",
          "affiliation": {
            "@type": "Organization",
            "name": "Kuaishou Technology"
          }
        },
        {
          "@type": "Person",
          "name": "Wencong Zeng",
          "affiliation": {
            "@type": "Organization",
            "name": "Harbin Institute of Technology"
          }
        },
        {
          "@type": "Person",
          "name": "Wanxiang Che",
          "affiliation": {
            "@type": "Organization",
            "name": "Harbin Institute of Technology"
          }
        }
      ],
      "citation": [
        {
          "@type": "ScholarlyArticle",
          "identifier": {
            "@type": "PropertyValue",
            "propertyID": "SemanticScholar",
            "value": "4d41fff4387e15e920b4fd020a6ad9f09828281a"
          },
          "url": "https://www.semanticscholar.org/paper/4d41fff4387e15e920b4fd020a6ad9f09828281a"
        },
        {
          "@type": "ScholarlyArticle",
          "identifier": {
            "@type": "PropertyValue",
            "propertyID": "SemanticScholar",
            "value": "5349cb63cf8d6bd7b84ba56f37290b1b3db021b3"
          },
          "url": "https://www.semanticscholar.org/paper/5349cb63cf8d6bd7b84ba56f37290b1b3db021b3"
        },
        {
          "@type": "ScholarlyArticle",
          "identifier": {
            "@type": "PropertyValue",
            "propertyID": "SemanticScholar",
            "value": "37773e557d7e1666bb1472c70faf1c22f19938e6"
          },
          "url": "https://www.semanticscholar.org/paper/37773e557d7e1666bb1472c70faf1c22f19938e6"
        },
        {
          "@type": "ScholarlyArticle",
          "identifier": {
            "@type": "PropertyValue",
            "propertyID": "SemanticScholar",
            "value": "611610c57dc08a76db23613f51f0cc520af5b404"
          },
          "url": "https://www.semanticscholar.org/paper/611610c57dc08a76db23613f51f0cc520af5b404"
        },
        {
          "@type": "ScholarlyArticle",
          "identifier": {
            "@type": "PropertyValue",
            "propertyID": "SemanticScholar",
            "value": "b6de3c2ccd55ce5d324b749660a03cb90a3b9d2b"
          },
          "url": "https://www.semanticscholar.org/paper/b6de3c2ccd55ce5d324b749660a03cb90a3b9d2b"
        },
        {
          "@type": "ScholarlyArticle",
          "identifier": {
            "@type": "PropertyValue",
            "propertyID": "SemanticScholar",
            "value": "1c3b90db450290040aa2d22e1e1442ea9d18553f"
          },
          "url": "https://www.semanticscholar.org/paper/1c3b90db450290040aa2d22e1e1442ea9d18553f"
        },
        {
          "@type": "ScholarlyArticle",
          "identifier": {
            "@type": "PropertyValue",
            "propertyID": "SemanticScholar",
            "value": "b6266adf848d7d5fbb9082f223a969a83eb6d416"
          },
          "url": "https://www.semanticscholar.org/paper/b6266adf848d7d5fbb9082f223a969a83eb6d416"
        },
        {
          "@type": "ScholarlyArticle",
          "identifier": {
            "@type": "PropertyValue",
            "propertyID": "SemanticScholar",
            "value": "319694295cc5f57d119bbc460ed77d1c35c83680"
          },
          "url": "https://www.semanticscholar.org/paper/319694295cc5f57d119bbc460ed77d1c35c83680"
        },
        {
          "@type": "ScholarlyArticle",
          "identifier": {
            "@type": "PropertyValue",
            "propertyID": "SemanticScholar",
            "value": "d29924cd78cfbc51dd6770a40284d7a62dc9837e"
          },
          "url": "https://www.semanticscholar.org/paper/d29924cd78cfbc51dd6770a40284d7a62dc9837e"
        },
        {
          "@type": "ScholarlyArticle",
          "identifier": {
            "@type": "PropertyValue",
            "propertyID": "SemanticScholar",
            "value": "5c29ce07433679fc5e2a5bed83d3a80464b966e6"
          },
          "url": "https://www.semanticscholar.org/paper/5c29ce07433679fc5e2a5bed83d3a80464b966e6"
        },
        {
          "@type": "ScholarlyArticle",
          "identifier": {
            "@type": "PropertyValue",
            "propertyID": "SemanticScholar",
            "value": "095b31dfaa032a2daf13da21bd4d04dddb2097fa"
          },
          "url": "https://www.semanticscholar.org/paper/095b31dfaa032a2daf13da21bd4d04dddb2097fa"
        },
        {
          "@type": "ScholarlyArticle",
          "identifier": {
            "@type": "PropertyValue",
            "propertyID": "SemanticScholar",
            "value": "4136b603d6d6e7b591926e1a52d8667bc96d3052"
          },
          "url": "https://www.semanticscholar.org/paper/4136b603d6d6e7b591926e1a52d8667bc96d3052"
        },
        {
          "@type": "ScholarlyArticle",
          "identifier": {
            "@type": "PropertyValue",
            "propertyID": "SemanticScholar",
            "value": "5f4efbe3aae1d8f44ceab1da257ae685d6beb00b"
          },
          "url": "https://www.semanticscholar.org/paper/5f4efbe3aae1d8f44ceab1da257ae685d6beb00b"
        },
        {
          "@type": "ScholarlyArticle",
          "identifier": {
            "@type": "PropertyValue",
            "propertyID": "SemanticScholar",
            "value": "8d064f58dd2374f9b702716f75d7ab58485f8eef"
          },
          "url": "https://www.semanticscholar.org/paper/8d064f58dd2374f9b702716f75d7ab58485f8eef"
        },
        {
          "@type": "ScholarlyArticle",
          "identifier": {
            "@type": "PropertyValue",
            "propertyID": "SemanticScholar",
            "value": "342ff7d167825e0024023ad72613682ddb7d0f0c"
          },
          "url": "https://www.semanticscholar.org/paper/342ff7d167825e0024023ad72613682ddb7d0f0c"
        },
        {
          "@type": "ScholarlyArticle",
          "identifier": {
            "@type": "PropertyValue",
            "propertyID": "SemanticScholar",
            "value": "e0ba6692e80867aad20bc8d90dcceb9c32f072d3"
          },
          "url": "https://www.semanticscholar.org/paper/e0ba6692e80867aad20bc8d90dcceb9c32f072d3"
        },
        {
          "@type": "ScholarlyArticle",
          "identifier": {
            "@type": "PropertyValue",
            "propertyID": "SemanticScholar",
            "value": "08f53d20666077f3398cf23c598e5e42fb01aa94"
          },
          "url": "https://www.semanticscholar.org/paper/08f53d20666077f3398cf23c598e5e42fb01aa94"
        },
        {
          "@type": "ScholarlyArticle",
          "identifier": {
            "@type": "PropertyValue",
            "propertyID": "SemanticScholar",
            "value": "e5bd79d935e63e6a70b6c5dd5f68ae7b170fbf6e"
          },
          "url": "https://www.semanticscholar.org/paper/e5bd79d935e63e6a70b6c5dd5f68ae7b170fbf6e"
        },
        {
          "@type": "ScholarlyArticle",
          "identifier": {
            "@type": "PropertyValue",
            "propertyID": "SemanticScholar",
            "value": "30e13e65d68a195ab6748da16e2a015756d4ca7b"
          },
          "url": "https://www.semanticscholar.org/paper/30e13e65d68a195ab6748da16e2a015756d4ca7b"
        },
        {
          "@type": "ScholarlyArticle",
          "identifier": {
            "@type": "PropertyValue",
            "propertyID": "SemanticScholar",
            "value": "f1d7a4ed38192f156e77cde0785093cc0b66259e"
          },
          "url": "https://www.semanticscholar.org/paper/f1d7a4ed38192f156e77cde0785093cc0b66259e"
        }
      ],
      "additionalProperty": [
        {
          "@type": "PropertyValue",
          "propertyID": "viabilityScore",
          "value": 7
        },
        {
          "@type": "PropertyValue",
          "propertyID": "researchDomain",
          "value": "Code Security Automation"
        }
      ]
    },
    {
      "@type": "BreadcrumbList",
      "itemListElement": [
        {
          "@type": "ListItem",
          "position": 1,
          "name": "Home",
          "item": "https://sciencetostartup.com"
        },
        {
          "@type": "ListItem",
          "position": 2,
          "name": "Code Security Automation",
          "item": "https://sciencetostartup.com/topics"
        },
        {
          "@type": "ListItem",
          "position": 3,
          "name": "CVE-Factory: Scaling Expert-Level Agentic Tasks for Code Sec",
          "item": "https://sciencetostartup.com/paper/cve-factory-scaling-expert-level-agentic-tasks-for-code-security-vulnerability"
        }
      ]
    },
    {
      "@type": "FAQPage",
      "mainEntity": [
        {
          "@type": "Question",
          "name": "What is the startup potential of \"CVE-Factory: Scaling Expert-Level Agentic Tasks for Code Sec\"?",
          "acceptedAnswer": {
            "@type": "Answer",
            "text": "CVE-Factory transforms CVE metadata into automated, expert-level code security tasks."
          }
        },
        {
          "@type": "Question",
          "name": "What products could be built from this research?",
          "acceptedAnswer": {
            "@type": "Answer",
            "text": "CVE-Factory can be developed into a cloud-based service that automatically produces verified security task kits from known vulnerabilities, assisting companies in quickly resolving security issues with minimal manual intervention."
          }
        },
        {
          "@type": "Question",
          "name": "What are the practical use cases?",
          "acceptedAnswer": {
            "@type": "Answer",
            "text": "Develop a SaaS platform offering automated vulnerability assessment and repair tasks to DevSecOps teams, enhancing their ability to quickly patch and verify security issues in large codebases."
          }
        },
        {
          "@type": "Question",
          "name": "What industries could this research disrupt?",
          "acceptedAnswer": {
            "@type": "Answer",
            "text": "Replaces traditional manual vulnerability reproduction and repair tasks, rendering many current slow and expensive methodologies obsolete, especially in environments demanding urgent security updates."
          }
        }
      ]
    }
  ]
}

CVE-Factory: Scaling Expert-Level Agentic Tasks for Code Security Vulnerability

CVE-Factory: Scaling Expert-Level Agentic Tasks for Code Security Vulnerability

Claim map

Constellation map

Competitive landscape

Buzz

PDF

References(30)

Related Papers

Subscribe to the weekly brief

Build artifacts

Brief

Experiment plan

Validation checklist

Scientific founder

Translational engineer

Domain operator

GTM lead

Regulatory/clinical advisor

Timeline

Claim map

Constellation map

Competitive landscape

Buzz

PDF

References(30)

Related Papers

Subscribe to the weekly brief

Build artifacts

Brief

Experiment plan

Validation checklist

Scientific founder

Translational engineer

Domain operator

GTM lead

Regulatory/clinical advisor

Timeline