Arm just handed the industry a new weapon against hidden bugs in sprawling codebases. The chip designer open-sourced Metis on May 28, an agentic AI framework built by its product security team to spot complex vulnerabilities that static tools routinely miss. Mark Hambleton, Arm’s SVP of Software, laid out the stakes in the company’s official announcement . Modern software stretches across vast frameworks, runtimes and libraries. Traditional static analysis hits limits when issues span multiple layers. Metis tackles that gap. The framework already scans more than 130 Arm software projects internally. Full company-wide adoption sits on track for late 2026. And now anyone can pull the code from GitHub under Apache 2.0 . Results from Arm’s own tests stand out. Metis delivered up to 10 times higher true positive rates. It cut false positives by about 50 percent versus leading static analysis tools. Those numbers come from benchmarks that avoided AI training data. Developers waste less time chasing ghosts.…