Nous Research adds official Security plugin to Hermes Agent for codebase bug review

Nous Research says Hermes Agent can now review a codebase for security bugs through a new official Security plugin.

According to the company, Hermes maps attacker-reachable inputs, splits the code across parallel subagents, and checks whether each candidate finding is exploitable. When test confirmation is on, it writes and runs a reproduction for each finding in a temporary copy of the repository, then exports the results as SARIF reports.

The announcement was posted on X by Nous Research's account. The reported facts come from that single post, so the plugin's accuracy in practice is not yet independently verified.