Haxset Research
Technical publications from our research and advisory practice.
3 posts tagged static-analysis · Clear filters
In most published samples, most rule-based SAST findings are false. How to measure noise, what AI triage removes and misses, and how Haxset limits both.
What AI SAST is, what it finds that rules miss (IDOR, business logic, misconfiguration), where the LLM sits, and how to test a vendor's accuracy claim.
How Haxset's AI SAST gives each web and mobile vulnerability class its own agent, how two models raise confidence in thorough mode, and how AI DAST works.