Blog

SAST

Research, engineering notes, and product updates tagged with SAST.

Better CVE-Based SAST Rules Start with the Right Patch

How we rebuilt CVE Tracer’s Patch Finding Agent for GrepRules and improved correct patch attribution from 21% to 77%.

Sep 4, 2026SAST Engineering Vulnerability Research

Launching greprules.io and greprules Plugin: Free SAST Rules for the AI Coding Era

Meet greprules.io and the greprules Plugin: a free way to discover and use OpenGrep/Semgrep-compatible SAST rules in developer and AI coding workflows.

Jun 4, 2026Product SAST Open Source

CVE to SAST Rule Generation: How We Build OpenGrep Rules from Real Patches

How Provally turns public CVEs into OpenGrep-compatible SAST rules using patch attribution, root-cause analysis, and validation against real commits.

Jun 2, 2026SAST Engineering Vulnerability Research