VulnSAGE: Adjudicating SAST Reports by Connecting LLM Reasoning to Program Structure

Static Application Security Testing SAST reports flag operations whose safety depends on project-specific context, and maintainers must decide which reports describe real defects. Large language models LLMs can interpret this context, but adjudicating a report with them requires the decisive code...

A Multi-Agent Framework for Automated Exploit Generation with Constraint-Guided Comprehension and Reflection

Open-source libraries are widely used in modern software development, introducing significant security vulnerabilities. While static analysis tools can identify potential vulnerabilities at scale, they often generate overwhelming reports with high false positive rates. Automated Exploit Generatio...