AI Agents for Application Security: JIT’s Sarah Agent

Summary

The video argues that AI agents can reduce application-security workload by triaging and correlating scanner findings, identifying exploitable attack paths, and assisting remediation. It presents JIT’s sponsored Sarah agent as an example, with human oversight.

Key points

• The speaker says understaffed security teams face growing backlogs and time-consuming manual vulnerability triage, code review, and remediation.
• The video describes AI agents as software that can perform tasks and make decisions with limited human intervention, while leaving complex judgments to security professionals.
• In a sponsored segment, JIT presents Sarah, its security evaluation and remediation agent, as correlating scanner findings with code and cloud environments to identify risks such as chained attack paths.
• The speaker says Sarah can explain potential attack paths in plain language and assist with remediation while users guide the fix.
• JIT is also described as offering custom agents for monitoring security issues, including CVE reachability, production status, and autofix options, and for generating tickets and pull requests.
• The video argues that agents should augment security engineers by handling repetitive work, not replace their expertise.

People

Vendors

Products