Better CVE-Based SAST Rules Start with the Right Patch
How we rebuilt CVE Tracer’s Patch Finding Agent for GrepRules and improved correct patch attribution from 21% to 77%.
Blog
Vulnerability Research
Research, engineering notes, and product updates tagged with Vulnerability Research.
CVE to SAST Rule Generation: How We Build OpenGrep Rules from Real Patches
How Provally turns public CVEs into OpenGrep-compatible SAST rules using patch attribution, root-cause analysis, and validation against real commits.