---
title: "Comment by Ryan Dens on \"SAST is just crazy bad at XSS\" | Hashnode"
description: "It's crazy to me how much noise appsec/prod sec engineers have to sift through to get actionable, validated insights on their code. \"Example 1 of 10 Million\" re"
url: "https://hashnode.com/posts/sast-is-just-crazy-bad-at-xss/686fda204baf225bb8198991/comment/686fdb519288a6213ae47683"
---

[Discussion](https://hashnode.com/posts/sast-is-just-crazy-bad-at-xss/686fda204baf225bb8198991)

Comment [SAST is just crazy bad at XSS](https://hashnode.com/posts/sast-is-just-crazy-bad-at-xss/686fda204baf225bb8198991)

[Ryan Dens](https://hashnode.com/@ryandens)

[Jul 10, 2025](https://hashnode.com/posts/sast-is-just-crazy-bad-at-xss/686fda204baf225bb8198991/comment/686fdb519288a6213ae47683)

It's crazy to me how much noise appsec/prod sec engineers have to sift through to get actionable, validated insights on their code.

"Example 1 of 10 Million" really got me 🤣