Coinbase has introduced an internal security platform called Continuous Adversarial Testing, or CAT, designed to examine new and existing services using autonomous AI agents. The system expands the exchange's testing coverage across web and mobile applications, backend infrastructure, blockchain integrations, and its own AI tools.

The platform reviews code changes and product launches while monitoring newly discovered services. Findings enter a shared validation and triage process with an audit trail and operating rules. Coinbase describes the system as an extension of its offensive security team's capacity to identify and investigate weaknesses.

The approach addresses a timing problem in software security: systems continue changing between scheduled assessments. A newly deployed service or modified integration can create a different exposure from the version previously reviewed. Continuous checks are intended to bring testing closer to the moment those changes occur.

CAT's scope also includes the connections between conventional backend software and smart contracts, where responsibility can span multiple systems. The announcement describes how Coinbase is building its defensive workflow, rather than proof that vulnerabilities have been eliminated. Its value depends on identifying meaningful findings and getting them resolved by the responsible teams.