Agent code is the new attack surface
Teams are shipping agents through SDKs, plugins, skills, hooks, MCP servers, and CI workflows. Baz now runs a dedicated security reviewer on every Change that touches agent code.
Blog
Perspectives on AI code review, review agents, and shipping quality software, from the team building Baz.
October 7, 2026BlogAgent code is the new attack surfaceGuy Eisenkot7mAugust 10, 2026BlogSkills Maintainer: keeping your instruction files trueOmer Militcher6mJuly 29, 2026BlogAwesome Reviewers, rebuilt: instructions across AI and infrastructure domainsGuy Eisenkot6mJuly 29, 2026BlogSAST-inside: expanding the hypothesis space of agentic security reviewOmri Levy7mJuly 29, 2026BlogSpec Reviewer now runs your application before reviewing itAnton Grubel3mJuly 8, 2026BlogBring AI Code Review to Azure DevOps with BazGuy Eisenkot1mJuly 7, 2026BlogHow to know when an autonomous merge agent is workingNimrod Kor3mJuly 6, 2026BlogCode review needs an inboxShacahar Azriel3mJuly 3, 2026BlogUsage-based AI needs budget controlsGuy Eisenkot3mJuly 1, 2026BlogApprove the plan before the code existsGuy Eisenkot3m
Ready to see Baz in action?
Learn from our blog, then talk to us about how Baz can help your team.