SATriage is an automated defect analysis platform that processes output from Application Security Testing (AST) tools to help developers and security teams understand each defect's context, importance, and risk factors. The system utilizes algorithms and internal databases to normalize and correct mis-characterized or mis-aligned vulnerabilities found by external scanning tools.
The platform performs an ease-of-exploitation analysis to determine the probability of attack and identifies the specific potential consequences of each defect. It provides a 1:N statistical ranking of all vulnerabilities and calculates the expected financial loss and return on investment (ROI) for resolving each defect, delivering detailed reporting and precise remediation guidance.
