Semgrep(@semgrep):Same four repos, same revisions. Semgrep Multimodal found 63 confirmed IDORs that Mythos didn't report, at 59.9% recall against 13.9%. Mythos was the more precise of the two. For bugs that hide behind an authenticated endpoint, we'd still take the recall. Read the research:

Semgrep

@semgrep

Code security for builders. Catch, flag, and fix real issues before they ship, powered by security that learns as you build.

Joined May 2019

205 Following 4.7K Followers

Semgrep@semgrep

2026.08.27 19:02

Same four repos, same revisions. Semgrep Multimodal found 63 confirmed IDORs that Mythos didn't report, at 59.9% recall against 13.9%. Mythos was the more precise of the two. For bugs that hide behind an authenticated endpoint, we'd still take the recall. Read the research: