They're also using "AI SAST tools", which: I would not expect anything branded a... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		tptacek 5 months ago \| parent \| context \| favorite \| on: Claude Code can debug low-level cryptography They're also using "AI SAST tools", which: I would not expect anything branded as a "SAST" tool to find interesting bugs. SAST is a term of art for "pattern matching to a grocery list of specific bugs".

bgwalter 5 months ago [–]

ZeroPath for example brands itself as "AI" SAST. I agree that these tools do not find anything interesting.

Consider applying for YC's Summer 2026 batch! Applications are open till May 4
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact