SESAA Framework Evolves Static Analysis Rules via LLM Pseudo-Labeling
October 23, 2026
SESAA uses an LLM agent to iteratively evolve Joern queries for security bug detection without ground-truth labels. On the OWASP Python benchmark, it achieved a mean F1 of 0.742, performing comparably to tuned industry-standard tools.
HOW THIS AFFECTS YOU
●
builderYou can automate the creation of custom static analysis rules for new frameworks and APIs.
●
researcherThe iterative pseudo-labeling approach offers a way to scale rule generation in domains lacking labeled datasets.