Applications & Fraud

Application Security

Code, dependency, secret, infrastructure and logic-flaw findings · plain-English requirements · AI agents that fix · developer training

Open findings

184

code, dependencies, secrets, IaC

Critical

all with AI fix proposed

AI-generated code share

38%

of merged lines this quarter

Median time to fix

2.1 days

was 9 days before autofix

Findings

Finding	Repository	Type	Issue	Severity	Fix	Status
APP-5512	afcos-core	Logic gap	STR export endpoint checks login but not RO scope	Critical	Autofix PR	Open
APP-5509	client-portal	Dependency	Vulnerable XML parser (known CVE, reachable)	High	Autofix PR	Open
APP-5501	goaml-bridge	Secret	API token committed in test fixture	Critical	Revoked + rotated	Fixed
APP-5498	infra-terraform	IaC	Bucket without object lock for evidence	High	Autofix PR	Merged
APP-5490	wb-portal	Code	Timing side channel in token compare	Medium	Autofix PR	Open