BSidesSF 2026 - The great SAST dissonance: how to please every... (Claudio Merloni, Romain Gaucher)

This talk addresses the challenges faced by Static Application Security Testing (SAST) tools in modern applications, highlighting the issues of incomplete coverage that can create a false sense of security. Claudio Merloni and Romain Gaucher discuss the role of AI in optimizing SAST processes, enabling tailored orchestrations for different applications. By leveraging AI, human experts can concentrate on delivering a balanced combination of coverage and actionable findings, enhancing overall security in software development.