triage-agent and remediation-agent as the default handlers for a vulnerability’s lifecycle. You can replace either handler, or add your own, when your team has an agent that is better suited to the work.
Your agent can be a custom agent built with the SDK, a Cursor Cloud agent, Devin, or another agent connected to Antigen.
Assign a vulnerability
Assign a vulnerability to your agent through the SDK. The assignment-change event starts your agent with the same live vulnerability that Antigen’s built-in agents use. Your agent can access the vulnerability’s evidence, triage context, status, and assignment history. Your agent can also use your organization’s Asset Map to understand the infrastructure related to the vulnerability.Replace a default workflow
You can register your agent to respond when a vulnerability entersopen, then use it instead of triage-agent. You can also assign vulnerabilities to your agent during triage instead of assigning them to remediation-agent.
The vulnerability stays in the same lifecycle regardless of which agent handles it. Your agent can update its status, attach evidence, assign follow-up work, and move it forward when the work is complete.