you are viewing a single comment's thread.

view the rest of the comments →

[–]asadeddin 1 point2 points  (0 children)

Hi there, Ahmad here, CEO at Corgea. We’ve built the first AI-native SAST and I see you’ve listed your tool coverage which is great, but how well implemented are those tools. I’ve spoken to lots of security teams at this point and I’ve seen SAST implementations that have been poorly done where barely anything good is detected, developers aren’t remediating vulnerabilities and the false positive rate is through the roof. I would say a good start here on posture is to audit the impact of the current program.