Ask HN: Are there any decent LLM-based web application scanners?
I'm looking for LLM-based web application scanners capable of finding vulnerabilities that aren't typically detected by traditional scanners like in Burp Pro. Even though LLMs are prone to errors and, in my opinion, don't truly understand what they are saying or doing, I still believe they could be useful for detecting issues like broken access control or business logic errors, or for navigating complex web applications with a little more "thought" while looking for vulnerabilities. I tried googling for solutions, preferably with a trustworthy team and with on-premise deployment, but I didn't find many that met those criteria. Can anyone here recommend something or is working on such a product? Thanks!
0 comments
—