Finding and Fixing Vulnerabilities Using AI
AI is far more effective at finding and fixing vulnerabilities if you prepare for its use. [Aniszczyk2026] expresses this: “The single most important thing to understand about working with AI tools… is helping the robot help you by providing the proper context to execute tasks… just like people, giving the robot access to specific, focused data makes it better and less prone to error.”
In this chapter we’ll focus on the key preparatory tasks that make using AI to find and fix vulnerabilities far more effective. This means preparing the AI, the threat models, the sandbox, AI logging, code & documentation, CI/CD, and dependency updates.
