Most high-severity cloud security findings are downgraded once an AI agent checks the environment
Sola Security's AI agent changed grades on 75.1% of 9,967 high-severity cloud findings, mostly downward.
Sola Security researchers Leon Goldberg and Gal Engelberg built an AI agent that re-grades high-severity findings from third-party cloud security platforms using live environment context. On 9,967 HIGH findings from two commercial platforms across eight production environments, the agent changed 75.1% of grades, lowering 58.5% and raising 16.6%. Each of 599 vendor rules had assigned a single severity across 99,073 failing findings. Read-only probes of AWS accounts matched the agent's deciding facts 99.4% of the time when they could verify them; the study measured reading, not autonomous action.
- Agent regraded 9,967 HIGH findings: 58.5% down, 16.6% up.
- 599 vendor rules used one static severity across 99,073 failures.
- 32.3% of checkable cases were inert or orphaned resources.
- AWS probes matched deciding facts 99.4% when verification was possible.
- Study measured contextual reading only, not autonomous remediation.
- Vendors
- Amazon Web Services
- Organizations
- Sola Security
From the original article
3 min read at helpnetsecurity.com
Cloud security platforms turn every failed rule into a finding, and those findings pile up in queues sorted by severity. Research from Sola Security tested what happens to that order when each finding gets checked against the environment where it lives. The researchers, Leon Goldberg and Gal Engelberg, built an AI agent that re-grades findings raised by third-party cloud security platforms.
By Sinisa Markovic · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.