How AI Can Navigate Code and Catch Complex Vulnerabilities

This HackerOne Engineering article explains research into an AI agent that indexes and navigates codebases (using ASTs, lexical analysis, and LLM-based NER) to build call graphs and detect potential vulnerabilities — demonstrated by identifying an XSS exploit path — and stresses the value of human-in-the-loop validation for reducing false positives.