Looking at their website, depthfirst seems to offer an product that essentially solves this problem.

Seems like a space that is really heating up. I recall most of the foundational labs announced some kind of agentic security product last year (OpenAI's Aardvark, Claude Code security reviewer, etc.)