AI Security Agents Fail When You Build Six Products at Once
Discovery, validation, containment, recall, cost control, and patching are different problems. Treating them as one is how agentic security projects die early.
More notes
From Vulnerability Triage to Exposure Validation
AppSec credibility is shifting from finding more issues to proving what materially changes exposure: exploitability, tenant impact, failed assumptions, and what engineering should do next.
In Legacy Codebases, AppSec AI Is Mostly a Context Problem
In large legacy codebases, AI AppSec quality depends less on finding a smarter model and more on extracting enough structure and context to avoid shallow analysis.