Agents

Guides for building AI agents on top of k9 Security's Reachable Risk platform. Each guide is a complete, executable recipe: the architecture, the exact configuration values, the gotchas we hit, and a ready-to-run prompt template.

Guides

• Automatically triage Dependabot alerts with an AI agent — a scheduled Claude Code cloud routine that scores every open Dependabot alert with the k9 rubric (KEV + EPSS + reachability + impact), prepares warranted fixes as pull requests, and files an evidence-cited report to Confluence and Jira every week.
• Automatically triage Dependabot alerts with GitHub Actions: the same triage policy as a scheduled GitHub Actions workflow, run by GitHub Copilot, reporting to the workflow run and Microsoft Teams.

The two dependency-alert guides apply the same k9 rubric and the same triage policy; pick the one that matches where your team already works. Claude Code cloud routines suit teams whose review queue lives in Jira and Confluence. The GitHub Actions guide suits teams on Copilot licenses who want triage inside CI, next to the pull requests it opens.

---

Last update: August 18, 2026