News
AWS details a steering file that configures an AI model to sort vulnerabilities from evidence.
About 30% of the results of an unguided model cited code structures absent from the target repository, according to AWS.
Each result must be verified in the code before being reported: files, functions, data flows and call path.
Results with confirmed taint and without sanitization were exploitable 89% of the time during validation.
On a test application with ten vulnerabilities, the guided model found nine and ranked the two mitigated ones as P3.