Semgrep eventsTraditional static analysis is effective at finding common issues like SQL injection and cross-site scripting, but some of the most impactful vulnerabilities come from business logic flaws such as IDOR, broken authorization, and workflow abuse. These issues are often harder to detect because they depend on application context, developer intent, and how different parts of a system interact.
In this session, we’ll explore how AI-powered multimodal analysis can complement traditional application security techniques to uncover complex logic vulnerabilities that aren't caught by conventional tooling.
In this webinar, Erik will cover:
Where LLM-powered analysis shines, and where it falls short
How you can combine AI agents and efficient, consistent program analysis tools
Why the multimodal approach that combines the best of both strategies outperforms AI agents alone