Workspace Chat
Not a chatbot. The interface to the platform.
Workspace Chat answers from your findings, scans, triage decisions and the knowledge graph. It is a way to question your own data in plain language, not a general assistant bolted onto a dashboard.
The distinction matters
A general assistant can describe what SQL injection is. That is not the question an engineer has at eleven at night. The question is whether this finding, in this project, on this code path, is reachable and worth stopping the release for.
Answering that requires the finding, the scan that produced it, the triage evidence, and the graph relationships behind the rule.
Workspace Chat sits on top of all of it. Answers point back to the findings and evidence they came from, so you can check the reasoning instead of trusting it.
What you can ask it to do
Explain finding
What matched, where, and what it means for this project specifically.
Send to Jira or Linear
An issue carrying the triage decision, its evidence and the remediation plan, not just a title and a severity.
Remediation plan
The change to make, the files, endpoints and tests it touches, and the test plan that proves it.
Explain triage
Why a finding was marked remediate or defer: reachability, attacker-controlled input, runtime and compensating controls.
Explain CVE
Affected ranges, exploitation conditions, and the upgrade path that resolves it here.
Explain rule
What the detection tests for, and the conditions under which it legitimately does not apply.
Compliance records
Which scans, decisions and re-scans map to a given control.
Security Q&A
Questions about your projects answered from your findings rather than from general knowledge.
Shared remediation
Whether one dependency upgrade or one change closes several findings at once.
Questions it answers from your data
Each of these requires joining findings to context: the kind of question that otherwise becomes an afternoon of manual correlation.
- Which of our critical findings are marked remediate, and why?
- Is this CVE in code that actually ships to runtime?
- What would one upgrade of this dependency close?
- Show me every finding that maps to OWASP A01 in the payments project.
- Why was this finding deferred, and on what evidence?
Answers point to sources
Answers refer to the findings, scans and triage evidence they drew on, so the reasoning can be checked rather than taken on faith.
Chat explains, it does not decide
Triage decisions come from deterministic rules applied to evidence. Chat explains them; it does not change them.
Scoped to your workspace
It reads the findings you have access to and nothing else: the same permissions that govern the web app govern chat.