Automatic remediation

Last updated: Sep 30, 2026

---

With the Autofix feature of Fluid Attacks, you remediate vulnerabilities in your source code fast. Autofix uses generative AI. It suggests custom changes that make your vulnerable code secure. The feature is at this time available in the Fluid Attacks extensions for VS Code, Cursor, and IntelliJ.

Below is a short explanation of how Autofix works and how to use it.

How Autofix works

Autofix is part of the Fluid Attacks extensions for VS Code, Cursor, and IntelliJ. The extensions get the vulnerability reports from the Fluid Attacks platform. They show the vulnerable lines of code in the IDE.

Autofix uses Claude Sonnet 4, an AI model from Anthropic, for code analysis and code generation. The model finds the vulnerability and produces a targeted fix. This saves you time and work in the remediation.

Autofix sends the code fragment to the model. The model makes the actions that remediate the vulnerability. It returns the code with the fix applied. For details on how Fluid Attacks uses Claude and protects your data, see the IDE extension FAQ.

Use Autofix

Autofix uses Claude to fix vulnerable code automatically. Before you start, install the Fluid Attacks VS Code extension, Cursor extension, or IntelliJ plugin. Then follow these steps:

1. Click the Fluid Attacks extension in the activity bar of the IDE. Find the file with the vulnerability that you want to fix.

2. Click the Autofix icon next to that file. The icon is a hammer and wrench on VS Code and Cursor, and a wrench on IntelliJ.

   

   Autofix connects to the Claude AI model. The model analyzes the code and makes the fix. During this procedure, you see the message "Trying to fix the vulnerability automatically."

   

3. After some seconds, Autofix changes the code. Examine the suggested fix. Continue only after you make sure that the code is secure.