Eric Snyder, Director of Global Partnerships, on what building alongside AWS has changed for us, from co-selling to where Semgrep shows up for developers.
From the AWS Startup Partner Summit this week.
In May, a set of OpenAI research agents that were supposed to be isolated from each other found a workaround: they started writing files into Artifactory, the internal package manager. It became a message board.
On July 5, a security incident was opened. It cleared the message
Same four repos, same revisions. Semgrep Multimodal found 63 confirmed IDORs that Mythos didn't report, at 59.9% recall against 13.9%. Mythos was the more precise of the two. For bugs that hide behind an authenticated endpoint, we'd still take the recall. Read the research:
We benchmarked Mythos against other models we have. Our analysis runs 23 configurations evaluated against 275 human-reviewed IDOR labels.
Mythos did not take the top spot, and as others have reported the harness matters more than the model. See our results:
In tomorrow's webinar, we share some lessons from the front lines of AI in AppSec: what's working, what isn't, and how to tell the difference before you've burned weeks of time & budget...
Teams are genuinely getting value from AI, but the key to elevating a party trick into a
