Research notes
from the pipeline.

Why 60–80% of automated vulnerability findings are wrong (and what we do about it)

Industry studies consistently put false-positive rates of automated security scanners between 60% and 80%. Here's the breakdown of where the noise comes from, why scanners can't fix it themselves, and how a four-stage research pipeline gets the rate to zero.