Positive Technologies has integrated the AI assistant PT Naira into the PT Application Inspector platform for source code security analysis. During testing, the system processed over 3,000 warnings. In 94% of cases, it correctly identified real vulnerabilities, and the number of false positives was reduced by 30%. In 75% of cases, the AI's conclusions matched the assessment of an AppSec specialist.
The technology is designed for the initial sorting of analysis results, known as triage. Such processing allows specialists to quickly separate real problems from false positives. According to Positive Technologies, analyzing such warnings can take up to 90% of an engineer's working time.
PT Naira forms a verdict on the identified problem, conducts preliminary analysis, and helps prepare arguments for discussion with developers. Results can be filtered by AI conclusion types.
When evaluating the system, its ability to find real vulnerabilities and reduce the number of false alarms was specifically considered. To check stability, each task was run five times, and only a completely matching correct result was counted.
Until March 1, 2027, basic AI triage is available to PT Application Inspector users for free. The system operates in Positive Technologies' secure cloud, and data is not transferred to third-party companies.