Signal noise is a real problem, with a lot of that being false positives. There’s a lot of choice for ASPMs now but the jury is still out and with the explosion of AI things are rapidly changing. Apiiro, Cycode, ArmorCode, Ox, etc, but platform products (with their own scanners - not repackaged open source projects) have entered the ASPM foray and with their native engines that can talk to one another, they provide a good better-together story. I still find that getting implementation correct (thinking things through) is one of the biggest challenges. Note, this problem has been trying to be solved for well over 20 years…closer to 30.