---
title: "Discussion on \"I couldn't find an AI agent for AppSec audits, so I built one and benchmarked it on real CVEs\" | Hashnode"
description: "Discussion on \"I couldn't find an AI agent for AppSec audits, so I built one and benchmarked it on real CVEs\". An open-source tool that turns Claude Code into a repeatable AppSec auditor, measured on CWE-Bench-Java: 57% recall, about $0.22 per run."
url: "https://hashnode.com/posts/i-couldn-t-find-an-ai-agent-for-appsec-audits-so-i-built-one-and-benchmarked-it-on-real-cves/6af5bb17b323451bbe410125"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [I couldn't find an AI agent for AppSec audits, so I built one and benchmarked it on real CVEs](https://seelentov.hashnode.dev/i-couldn-t-find-an-ai-agent-for-appsec-audits-so-i-built-one-and-benchmarked-it-on-real-cves?utm_source=hashnode&utm_medium=feed)

An open-source tool that turns Claude Code into a repeatable AppSec auditor, measured on CWE-Bench-Java: 57% recall, about $0.22 per run.

14h ago · 10 min read · seelentov.hashnode.dev  
Read the article

-   [#security](https://hashnode.com/tag/security)
-   [#ai](https://hashnode.com/tag/ai)
-   [#open-source](https://hashnode.com/tag/open-source)
-   [#appsec](https://hashnode.com/tag/appsec)
-   [#claude](https://hashnode.com/tag/claude)

## Written by

[vlfd](https://hashnode.com/@vlfd)

@vlfd

  
[View profile](https://hashnode.com/@vlfd)

## Responses

Markdown supported · ⌘↵ to post

No responses yet.