Where are you seeing real value today and where do you think the hype is getting ahead of reality?

Yeah, so I feel that for triage, prioritization, and fixing, this is fantastic, right? Our job on application security for many years, if you think about automation, was finding issues.

That was the goal from the get-go for application security.

But as a byproduct of true positives, false positives can happen.

So the tools tended to get a little bit noisier.

Over time, we created ways to weed out some of those problems, but they were never really good.

With AI, there's an easy way now to triage the results and look at the results that really matter.

Well, it's kind of like having the developer created the code, QA their own code, right? Like sometimes we, and it's not the fault of that person or the creator, it's that we just can't see what we can't see, right? That's why we have QA.