static-analysis

Semgrep Tool

Static-analysis security scanner that finds vulnerability classes like broken access control in real codebases, increasingly paired with AI models in its pipeline. Its public benchmark work this week is also a useful, honest reference for how well current models actually find security bugs.