AI Triage
AI Triage is an automated analysis step that runs on SAST findings before they are ingested into the Contrast Platform. Rather than surfacing every raw static finding directly to your security team, AI Triage examines each result in context and classifies it as a likely true positive or false positive.
For each finding, AI Triage produces three pieces of information:
Classification — whether the finding is likely a true positive or false positive
Justification — the reasoning behind the classification
Work performed — a description of what the AI agent analyzed to reach its conclusion
This information appears in the detailed view for each Observation in the platform. Issues resulting from false-positive findings are automatically moved to a Closed state by default, though administrators can configure the platform to keep all issues open if preferred.
AI Triage applies only to SAST findings. SCA findings are not processed by the AI Triage agent.