OpenRouting has developed a system that uses Claude, accessed via Amazon Bedrock, to triage findings from static analysis security testing (SAST) tools. Instead of relying solely on pattern matching, the LLM evaluates each finding's exploitability within its specific code context. Findings are routed to specialized reviewers based on their type, such as SQL injection or LDAP injection, and a fingerprinting mechanism prevents re-analysis of duplicate issues, saving costs. AI
IMPACT Enhances security tooling by leveraging LLMs for more accurate vulnerability triage, reducing false positives and improving developer efficiency.
RANK_REASON The item describes a specific application of an LLM to a security tooling problem, which is a product/tooling innovation rather than a core model release or research breakthrough.
- Amazon Bedrock
- Claude
- Common Weakness Enumeration
- CWE-89
- CWE-943
- LDAP injection
- OpenRouting
- Semgrep
- SQL
- SQLAlchemy
- SQL injection
- XML injection
AI-generated summary · Google Gemini · from 1 sources. How we write summaries →