I couldn't find an AI agent for AppSec audits, so I built one and benchmarked it on real CVEs
Ask Claude Code, or any coding agent, to "check this module for vulnerabilities" and you know how it goes. It skims a couple of controllers, flags string concatenation in a test file, writes a confide