Dossier
Grant Bourzikas
Coverage of Grant Bourzikas in the Nexus archive.
- Cloudflare has mostly ditched third party security tools, suggests not trying that at home
Cloudflare uses AI to automate bug bounty report processing with Anthropic’s Claude Sonnet model, reducing costs compared to a more expensive alternative. The company replaced most third-party security tools with home-grown AI-assisted applications but advises others against replicating this approach due to unique challenges.
- AI might cut false positives, but it won’t stop the slop
AI models like Anthropic's Mythos and OpenAI's Daybreak are generating a flood of new vulnerability reports, but many are false positives or lack proof of concept. GitHub is tightening its definition of a complete bug report due to the influx of AI-assisted submissions. Companies are struggling to separate signal from noise in bug reports.