AI coding tools help teams ship features faster than ever, but the hardest vulnerabilities to catch are the ones that look like valid application logic. Access control and business logic flaws are easy to miss in review because nothing looks broken. A user can see another user's data, or move money that isn't there, and the code behind it reads as ordinary though it has been manipulated. I ran the new SonarQube Hunter Agent on my app ProofWeave (9K lines of TypeScript) in SonarQube Cloud. It hunted through the codebase like an AppSec researcher and caught 6 logic and access control flaws that I would have missed in review, the kind that usually only get caught in pentests. Full walkthrough and findings in the thread 👇 Thanks to Sonar for sponsoring this post. 1/4