Benchmarking Endor Labs AI SAST: 2.6x more real vulnerabilities found than frontier models | Endor Labs

Summary

Endor Labs benchmarked its AI SAST product against four traditional SAST tools (Semgrep OSS, OpenGrep, Bearer, CodeQL) and two frontier models, Claude Opus 4.7 and Codex GPT-5.5, across 8 open-source projects. Endor Labs AI SAST found 192 real vulnerabilities, 2.6x what Claude Opus 4.7 found, 3.5x what Codex GPT-5.5 found, and 2.4x what Semgrep OSS found. It also produced about 60% fewer false positives than Semgrep OSS and OpenGrep.

Related items

• InfoChatGPT Plus for veterans and servicemembersSame vendor · OpenAI Blog
• MediumNovember 2026 Patch Tuesday: 63 Critical Microsoft fixes, plus an Outlook zero day that allows theft of hashed credentialsSame vendor · CSO Online
• MediumAI SAST Finding: Path Traversal in OpenClaw via LLM Guardrail Bypass | Endor LabsSame vendor · Endor Labs Blog
• MediumEndor Labs’ AI SAST Finds Zero Day Memory-Amplification DoS in Anthropic’s buffa library | Endor LabsSame vendor · Endor Labs Blog
• InfoAnthropic opens Australian retail IPO offering as AI scrutiny intensifies Same vendor · CNBC Technology