Open Source Isn't Dead.

Cal.com announced it is closing its source code, citing AI-automated vulnerability discovery as a near-zero-cost threat. Strix, an open-source AI security platform, disagrees with this conclusion. Their argument: black-box AI agents don't need repo access to exploit live endpoints, APIs, or business logic flaws. Closing source code removes helpful community scrutiny while leaving the attack surface fully exposed. The real answer is integrating AI-driven security testing directly into CI/CD pipelines — continuous automated defense to match continuous automated attack. Open source remains viable; the solution is fighting AI threats with AI defenders, not obscurity.