Google says its PageBreak security agent has found over 500 XSS vulnerabilities in its web applications since January. The Gemini-based system reports flaws only after deterministic validators reproduce an exploit, yielding a near-zero false-positive rate; Google has provided no independent validation.