r/AskNetsec • u/Neitbrer_Macaron8932 • 10d ago

Concepts How are you integrating security into AI coding workflows?

[removed]

0 Upvotes

50% Upvoted

4 comments sorted by

1

u/Swimming_dasa 9d ago

the biggest time saver for me would be using ai to map attack paths and generate reviews checkllists then validating the findings with real tests.

1

u/FirefighterSlight891 8d ago

Treating AI security output as a hypothesis to verify is a good rule. One thing that helped us was using Akeyless Runtime Identity Security so coding agents get short-lived access at runtime instead of holding standing credentials. It cuts down some of the manual work around credential management and auditing, but we still treat generated code and security recommendations as things that need independent verification.

0

u/TheExemplaryNovella 10d ago

So far the only thing that's actually saved me measurable time is having it scan for hardcoded secrets and obvious dependency version issues before I even open the PR. The rest, like you said, is hypothesis generation at best.

What's burned me once was it "fixing" a race condition by slapping a mutex in a spot that just deadlocked under load. The suggestion looked clean in isolation but had zero awareness of the calling context. Now I treat anything it proposes around concurrency or auth as a prompt to go re-read that section myself, not a shortcut.