pashov(@pashov):It seems every modern security researcher is building its own AI Security solution right now. Low false positives rate is prioritised, because less triage means more efficiency. Still, making your tool's 'judging' phase too rigorous can lead to dropping valid severe vulnerabilities. I'd recommend to prioritise being able to find deeper, multi-level vulnerabilities, instead of optimising for 0 triage time. Doesn't matter - human or AI finding - validation is always required anyway. And of course, don't do what everyone else is doing. This is how you fail. Be different to succeed🫡

2026.08.14 19:09

It seems every modern security researcher is building its own AI Security solution right now. Low false positives rate is prioritised, because less triage means more efficiency. Still, making your tool's 'judging' phase too rigorous can lead to dropping valid severe vulnerabilities. I'd recommend to prioritise being able to find deeper, multi-level vulnerabilities, instead of optimising for 0 triage time. Doesn't matter - human or AI finding - validation is always required anyway. And of course, don't do what everyone else is doing. This is how you fail. Be different to succeed🫡

147

Forward to community

Most Popular Users