I recorded a series of videos demonstrating different ways in which you can use #AGHAST.
This is the 5th example where we take the units produced by a @Knostic OpenAnt scan and scan those units individually for vulnerabilities.
https://youtu.be/pALxeunbH7s
I recorded a series of videos demonstrating different ways in which you can use #AGHAST.
This 4th example takes a SARIF file simulating some generic SAST results and evaluates each finding to decide if it is a false positive.
I recorded a series of videos demonstrating different ways in which you can use #AGHAST.
This is the 3rd example which doesn't use AI at all but rather just a custom written static rule to find exposed API endpoints without authentication decorators.
I recorded a series of videos demonstrating different ways in which you can use #AGHAST.
This 2nd video is a hybrid check using a static @semgrep rule to find uses of a sensitive function and an AI prompt on each use to check for correct validation.
I recorded a series of videos demonstrating different ways in which you can use #AGHAST.
This is the 5th example where we take the units produced by a @Knostic OpenAnt scan and scan those units individually for vulnerabilities.
https://youtu.be/pALxeunbH7s
I recorded a series of videos demonstrating different ways in which you can use #AGHAST.
This is the first one with a simple check that just uses an AI prompt to look for business logic being incorrectly enforced.
I recorded a series of videos demonstrating different ways in which you can use #AGHAST.
This 4th example takes a SARIF file simulating some generic SAST results and evaluates each finding to decide if it is a false positive.
I recorded a series of videos demonstrating different ways in which you can use #AGHAST.
This is the 3rd example which doesn't use AI at all but rather just a custom written static rule to find exposed API endpoints without authentication decorators.
I recorded a series of videos demonstrating different ways in which you can use #AGHAST.
This 2nd video is a hybrid check using a static @semgrep rule to find uses of a sensitive function and an AI prompt on each use to check for correct validation.
I recorded a series of videos demonstrating different ways in which you can use #AGHAST.
There is the first one with a simple check that just uses an AI prompt to look for business logic being incorrectly enforced.
Josh Grossman (tghosth👻) 