Blog
Engineering notes.
How the platform is built and why: architecture decisions, security research, scanner internals and the reasoning behind the knowledge graph.
How to secure AI-generated code before it reaches production
Coding agents write features in hours. Here is a practical workflow for keeping that code secure and compliant while it is written, rather than finding out at the end.
- AI-generated code
- Secure development
Release update: wider coverage, and a graph you can walk
This release expands detection across SCA, SAST, secrets, and now API security. It also introduces Graph View, giving you a way to understand where a finding sits in your application rather than simply knowing that it exists. Next up: the Triage Worker.
- Release
- Product
Why we built our own scanners
Orchestrating other people's scanners is the fast path to a product and the slow path to a good one. A note on what we gave up and what we got back.
- Scanning
- Product
A findings table is not a security knowledge graph
Why we model security knowledge as relationships rather than rows, and what becomes possible once the connections are the data.
- Knowledge Graph
- Reasoning