when A1 Finds Everything, How Should Your AppSec Metrics Change?

A1 models that excel at finding vulnerabilities accelerate both offense and defense: attackers can find more exploitable targets faster, while security teams are overwhelmed by alerts that obscure which issues actually pose meaningful risk.

Application security programs now need to operate within this reality

For both attackers and defenders, the new A1 models reduce the time it takes to reason about exploit paths, and make capabilities that once expert manual effort more broadly accessible.