At a glance

• The guidance describes AI as an accelerator for analysis and prioritization, not a replacement for security engineering judgment.
• Recommended safeguards include isolation, least privilege, zero-data-retention options, red teaming and treating code, plugins and inputs as untrusted.
• Human-led threat modeling remains central to deciding which findings matter to the business.
• The article connects AI-assisted research to risk-based vulnerability management and faster defensive decisions.