🧰 PageBreak

The items that name it 3

• https://bughunters.google.com/blog/pagebreak-real-world-findings?utm_source=tldrsec.com&utm_medium=newsletter&utm_campaign=tl-dr-sec-348-google-s-pagebreak-scanner-perplexity-s-agent-security-tool-defending-agentically
  writeup2026-10-01

  Google's scanner used to discover the real-world vulnerabilities discussed in this post

• [tl;dr sec] #348 - Google's PageBreak Scanner, Perplexity's Agent Security Tool, Defending Agentically
  article2026-10-01

  Google Product Security agent that found over 500 XSS bugs in Google first-party web applications since November 2025, mostly using Gemini 3.1 Pro and 3.5 Flash, with near zero false positives; each hypothesis goes to a validator that fires a real payload at a running environment

• Agentic Hacks, Real Proofs: Inside Google's PageBreak Project
  article2026-09-24

  Internal AI agent of Google's Product Security team that autonomously tests security of Google's first-party web applications, using LLMs (e.g. Gemini models) with deterministic validators to find and confirm vulnerabilities; piloted November 2025, became a fully-fledged project in January 2026