3 ms·
Cool. Why not use LLM for this kind of analysis? Cost or something else?
by ortrocky 8mo ago
Cool. Why not use LLM for this kind of analysis? Cost or something else?
- joohwan 8mo agoLLMs can find issues that traditional SAST misses, but today they are slow, expensive, and nondeterministic. SAST is fast and cheap, but requires heavy manual rule maintenance. Our approach combines the strengths of both. The scanning engine is fully rule based and deterministic, with a rule language expressive enough to model code at compiler level accuracy. AI is used only to generate broad rule coverage across thousands of patterns, without sacrificing scan performance or reliability.