Using LLMs for Vuln Discovery - Rishi Sharma - ASW #395

Security Weekly (Download Only) · Aug 11, 2026 · 1h 9m

Finding flaws has always been a focus of appsec. And now with open source projects and open weight models orgs have modern tools to review code and conduct pentests. Rishi Sharma describes the motivation behind creating a platform of LLM-driven security tools and the effective ways to keep the tools in scope, on budget, and for engineering teams. We talk about how prompts influence LLM activity, as well as the external constraints to keep the LLMs on task.

And even if finding flaws is a major focus of appsec, its goal should be delivering secure software and systems. We touch on some of the…