- Dataset
- 2026-10-27-catalog-ai-v2
- Ruleset
- b2e8889c66f7
- Scanned
- 2026-10-27
- Window
- February–September 15, 2026
Cloud-native SIEM for intelligent security analytics for your entire enterprise.
01Result
Azure/Azure-Sentinel ↗Azure/Azure-Sentinel AI coding statistics: 6.8%
Adoption is broad. Many contributors are committing agent-authored work, which is what a real organisational rollout looks like.
02Drivers
What shapes this result
Mode, timing, and detected signatures show whether the result reflects broad adoption or one concentrated workflow.
Assisted or autonomous
Assisted — a developer’s identity authored the commit and the agent added itself as co-author. Autonomous — a bot identity authored the commit without a human identity attached.
Agent share by month
| Month | Agent share | Considered commits |
|---|---|---|
| 2026-02 | 2.6% | 507 |
| 2026-03 | 2% | 707 |
| 2026-04 | 5.2% | 897 |
| 2026-05 | 9% | 703 |
| 2026-06 | 6.4% | 626 |
| 2026-07 | 8.2% | 488 |
| 2026-08 | 11.9% | 671 |
| 2026-09 | 12.6% | 253 |
Peak month: 12.6%. Bars are scaled to that peak, not to 100%.
Which agents
| Agent | Vendor | Commits | Share |
|---|---|---|---|
| GitHub Copilot | GitHub | 199 | 4.1% |
| Claude Code | Anthropic | 123 | 2.5% |
| Cursor Agent | Anysphere | 7 | 0.1% |
03Evidence
Inspect the matches
Public commit samples let you inspect the signatures behind the aggregate result.
Matched commit samples
5658f24aon GitHubRetain GuardDuty packed fields at ingestionGitHub Copilot4e4351a7on GitHubRevert "Fix Blob CCF role assignment GUID collisions" (#15125)GitHub Copilot35d50315on GitHubRegenerate QualysVM 3.1.0 packageGitHub Copilot971e9a04on GitHubClarify classic-table migration name in Scout playbook docsClaude Codeb90b34bfon GitHubMigrate Team Cymru Scout playbooks to the Logs Ingestion APIClaude Codeaed39409on GitHubNormalize Team Cymru Scout playbook template formattingClaude Code2bb8ecffon GitHubConvert Cyble parser to YAML, add README, address review feedbackCursor Agent3ede0ab1on GitHubRemove stray test/hello.txtCursor Agenta951c73con GitHubAdd Cyble threat intelligence parser for external reference source ratingsCursor Agent
04Method
What entered the denominator
The result begins with commit history, removes merges and routine automation, and reports literal agent signatures as a lower bound.
Exclusion ledger
| Commits in window | 6,582 |
| Merge commits removed | −1,615 |
| CI / dependency bots removed | −115 |
| Considered | 4,852 |
Bots are excluded from the denominator entirely. Agent attribution requires a literal supported signature; no code-style inference is used.
Continue exploring
Related coding-agent evidence
Run the same detector locally.
Deterministic signature matching; no code-style inference. Squash merges can remove trailers, so this result remains a measured floor.
npx qmmit-cli Azure/Azure-Sentinel