What is False positive rate? Definition and why it matters
==========================================================

The share of reported findings that are not real, exploitable bugs. Benchmarks that count only recall against a curated bug list cannot measure it.

Detail: Nethermind made the point about EVMbench: a tool can score well on recall while burying users in invalid findings. zkSecurity's HumanityLink engagement showed a threat-model file cutting false positives from 14 of 33 findings to 2, which is why the checklist asks whether scope input measurably reduces noise.

Source page: https://agentsast.com/glossary/false-positive-rate/
Compiled by: agentsast editors (https://agentsast.com/about/)
Last reviewed: 2026-09-13