HACKING WITH AI SASTS: AN OVERVIEW OF “AI SECURITY ENGINEERS”/“LLM SECURITY SCANNERS” FOR PENETRATION TESTERS AND SECURITY TEAMS

Summary from the TLDR InfoSec newsletter

An exploration of Almanax, Corgea, and ZeroPath Security's AI SAST capabilities. The post uses three steps in its evaluation: code retrieval and indexing, code scanning, and false positive detection, deduplication, and severity rating, along with some miscellaneous items like the ease of using the UIs. The author concludes that ZeroPath is the best out of the products tested, followed by Corgea and Almanax.