agentsastLast reviewed 2026-09-13
Index › Glossary › Triage burden

Triage burden

Direct answerThe human time needed to validate candidate findings. zkSecurity reported more than a thousand candidates across two hundred projects as its main bottleneck; Codex Security reported more than ten thousand high findings in its first month.

In more detail

Triage is where AI auditing budgets actually go. Tools that deduplicate across runs, rank by confidence and ship proofs of concept reduce it; tools that maximise finding counts increase it.

Tools that address it

zkao, Codex Security (formerly Aardvark).

False positive rate, Precision vs recall, Agentic scanning, LLM plus fuzzing, LLM plus symbolic execution or formal verification, Hallucinated vulnerabilities, Benchmark contamination, Human-in-the-loop, AI-assisted audit vs AI audit, Prompt injection in auditing pipelines, Responsible disclosure of AI-found bugs, Continuous scanning and run-count coverage, Proof-of-concept harness, Threat model file, Severity calibration

Getting help

Firms on this index that handle this in practice: zkSecurity, Trail of Bits, Zellic, Nethermind Security.

Last reviewed 2026-09-13 by the agentsast editors. Machine-readable: data.json · summary.txt