Tazabek — PageBreak’s internal AI agent has discovered more than 500 cross-site scripting vulnerabilities in Google web applications, the company announced September 24. Such errors could allow attackers to execute foreign code in the user’s browser.
The system looks for potential vulnerabilities, after which special tools check the possibility of their exploitation in running applications. According to Google, this approach brings the proportion of false positives closer to zero.
The pilot launch of PageBreak took place in November 2025. In January 2026, the development became a full-fledged internal project of the Google security team.
Follow the latest events via our Twitter @tazabek