Analyzing Software Vulnerabilities faster and orders of magnitudes cheaper (thetechstack.substack.com)

Decypher, a new tool designed for analyzing software vulnerabilities, has announced significant advancements in its capability to identify and validate security issues efficiently and affordably. By utilizing a compiler-grade Code Property Graph, Decypher can map intricate relationships in a codebase while achieving a remarkable 100x storage reduction and 3-5x faster query performance. This deterministic approach addresses a major issue with current LLM-driven vulnerability detection, which is often non-deterministic and less reproducible. Instead of relying solely on LLMs, Decypher integrates them into a structured analysis process, enhancing the accuracy of security assessments and reducing costs to mere cents per project. The tool employs a comprehensive five-stage pipeline that includes building a detailed Code Property Graph, identifying potential attack paths, and validating them through LLMs. This method not only streamlines the discovery of vulnerabilities but also leads to actionable insights, allowing developers to focus on genuine risks. Recent applications have successfully uncovered high-severity vulnerabilities (CVSS 3.1 ratings of 9+) at a fraction of the cost and time typically required. As Decypher prepares to expand its usage to open-source projects for scanning incoming pull requests, it holds the potential to disrupt the information security landscape by enabling proactive defenses against emerging threats.