Datadog Bits AI SAST: LLM Layer Evaluates Code Execution Paths and Validation Patterns to Filter OWASP Top 10 False Positives in Real-Time

Datadog Blog·medium signal

Datadog shipped AI-Enhanced SAST powered by Bits AI that evaluates surrounding code context to determine whether flagged vulnerabilities are true or false positives. Unlike static rules, the LLM reasons about how data flows through functions, how input is validated, and whether exploitation conditions are actually met. It maps findings to curated CWEs from the OWASP Benchmark and Top Ten, generating concise explanations for each assessment. This enables faster triage by improving signal-to-noise ratio without requiring developers to configure additional rules.