Exclusive: Fig launches AI agent and brings CI/CD to security operations

UPDATED 10:00 EDT / JULY 21 2026 SECURITY Exclusive: Fig launches AI agent and brings CI/CD to security operations by Duncan Riley Fig Security Inc. today unveiled what it calls the full engineering lifecycle for security operations, pairing an artificial intelligence agent with the version control, testing and rollback tooling that software developers have long used to ship code. The Israeli company, which launched publicly in March, is aiming at a chronic headache in the security operations center. New data sources, detections and cloud services arrive constantly, and upstream systems change without warning. Even a small update can quietly break a detection pipeline. When that happens, teams lose the ability to spot a threat and often have no idea a gap has opened. Fig’s answer centers on an AI agent built on what the company terms security data lineage, a deterministic graph mapping every detection flow across the SecOps stack. An engineer describes a needed change in plain language. The agent reads the live environment, proposes the change, then simulates and tests it to prove the impact before anything reaches production. Deployment happens in a click, with full version control and one-step rollback. Continuous observability afterward confirms that existing and new detection flows still run as intended. Fig calls the result the first true CI/CD for security operations, a nod to the continuous integration and delivery pipelines developers use to push code. The idea is that a detection change should move through build, test and deploy the way a software feature does. The company points to several jobs the approach speeds up. Threat reports turn into working detections the same day rather than next quarter. A security information and event management migration that once dragged on for months can finish in weeks and stay operational throughout. And because teams control the data plane, they can dictate what gets ingested and stored without touching detections already in production. Early users include AppLovin Corp. Jayme Hancock, head of security operations and engineering at the mobile technology company, said his team now ships accurate detection changes in minutes instead of weeks and works with “a confidence we’ve never had.” He added that engineers have even started “vibe parsing,” a riff on the vibe coding trend. “Security teams shouldn’t have to choose between moving quickly and maintaining confidence in their SecOps infrastructure,” said co-founder and Chief Executive Gal Shafir. “Fig gives SecOps engineers the same modern engineering workflow that software developers have long relied on. They can design changes with complete context, prove those changes work before deployment, and continuously verify that their security operations remain resilient as their environments evolve.” Founded in 2025 by veterans of Google LLC’s security operations group and Siemplify, Fig launched in March with $38 million in seed and Series A funding from Team8 Capital and Ten Eleven Ventures. It was named a finalist in this year’s RSAC Innovation Sandbox competition and says its platform has since reached dozens of Fortune 500 companies. It operates from offices in New York and Tel Aviv. Image: Fig Security A message from John Furrier, co-founder of SiliconANGLE: Support our mission to keep content open and free by engaging with theCUBE community. Join theCUBE’s Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities. 15M+ viewers of theCUBE videos, powering conversations across AI, cloud, cybersecurity and more 11.4k+ theCUBE alumni — Connect with more than 11,400 tech and business leaders sh