tl;dr: Google's Chrome team is using LLM-powered agents (built with DeepMind and Project Zero, including Big Sleep and CodeMender) to automate vulnerability discovery, triage, and patching, fixing 1,072 security bugs in Chrome 149-150 alone—more than the previous 23 milestones combined. The pipeline uses multi-agent workflows with critic agents, runs on locked-down machines with strict guardrails, and integrates into CI to catch bugs pre-commit. Google is also shortening the "patch gap" by piloting twice-weekly security releases, developing dynamic patching to avoid full browser restarts, and migrating C++ code to Rust and spanified constructs.