The platform integrates with existing SAST and Software Composition Analysis (SCA) tools, enhancing their capabilities by adding an AI-driven layer that can generate code fixes for reported vulnerabilities. This integration allows security teams to issue pull requests for fixes with a single click, streamlining the process of addressing security issues without disrupting established workflows.
One of Corgea's primary strengths is its ability to reduce the workload on engineering teams. By automating the process of generating fixes for security vulnerabilities, Corgea claims to save up to 80% of the time and effort typically spent by engineers on addressing these issues. This efficiency gain allows development teams to focus more on revenue-generating tasks and core product development.
The platform is designed to be developer-friendly, requiring no additional logins or new commands for engineers to learn. It works seamlessly with popular code hosting platforms such as GitHub, GitLab, and Bitbucket, distributing code fixes through these familiar channels. This approach ensures that the security enhancement process integrates smoothly into existing development practices.
Corgea's AI capabilities extend beyond simple fix generation. The platform can detect business logic and code logic vulnerabilities that are often missed by traditional SAST tools. This advanced detection helps companies identify potential security issues before they can be exploited by malicious actors or discovered through bug bounty programs or penetration testing.
Another key feature of Corgea is its ability to automatically triage false positives. The platform claims to reduce around 30% of security tickets by accurately identifying and filtering out false alarms from SAST scanners. This reduction in noise allows security teams to focus on genuine threats, improving overall security posture and efficiency.
Corgea supports a wide range of programming languages and frameworks, including Java, JavaScript, TypeScript, Go, Ruby, Python, C#, and their associated frameworks. This broad language support makes the platform versatile and applicable to diverse development environments.
The company behind Corgea emphasizes the platform's potential to change the dynamic between security and engineering teams. By empowering security teams to take proactive action in fixing vulnerabilities while simultaneously accelerating engineering velocity, Corgea aims to bridge the gap often found between these two crucial departments.
Key features of Corgea include:
Corgea represents a significant advancement in the field of automated code security, offering a comprehensive solution that not only identifies vulnerabilities but also actively participates in their resolution. By leveraging AI technology, Corgea aims to transform the landscape of application security, making it more efficient, effective, and integrated into the software development lifecycle.