Provally BlogResearch, engineering notes, and product updates from Provally.https://provally.io/en-usBetter CVE-Based SAST Rules Start with the Right Patchhttps://provally.io/blog/better-cve-based-sast-rules-start-with-the-right-patch/https://provally.io/blog/better-cve-based-sast-rules-start-with-the-right-patch/How we rebuilt CVE Tracer’s Patch Finding Agent for GrepRules and improved correct patch attribution from 21% to 77%.Fri, 04 Sep 2026 00:00:00 GMTSASTEngineeringVulnerability ResearchProvallyLaunching greprules.io and greprules Plugin: Free SAST Rules for the AI Coding Erahttps://provally.io/blog/greprules-free-sast-rule-hub/https://provally.io/blog/greprules-free-sast-rule-hub/Meet greprules.io and the greprules Plugin: a free way to discover and use OpenGrep/Semgrep-compatible SAST rules in developer and AI coding workflows.Thu, 04 Jun 2026 00:00:00 GMTProductSASTOpen SourceProvallyCVE to SAST Rule Generation: How We Build OpenGrep Rules from Real Patcheshttps://provally.io/blog/cve-to-sast/https://provally.io/blog/cve-to-sast/How Provally turns public CVEs into OpenGrep-compatible SAST rules using patch attribution, root-cause analysis, and validation against real commits.Tue, 02 Jun 2026 00:00:00 GMTSASTEngineeringVulnerability ResearchProvallyRSAC 2026 Application Security: What AI Changed Isn’t Detection — It’s the Way We Provehttps://provally.io/blog/rsac-2026-appsec-en/https://provally.io/blog/rsac-2026-appsec-en/Why SAST noise persists, how PoC-based verification proves real exploitability, and where AI-assisted AppSec workflows deliver value.Fri, 27 Mar 2026 00:00:00 GMTAppSecAI SecurityIndustryProvally