---
title: AppSecAI Performance Metrics | 97% Triage Accuracy & 93% Fix Rate
description: Transparent, open-sourced results for vulnerability triage and remediation. 97.2% aggregate triage accuracy and 93% automated fix rate on industry benchmarks.
image: https://www.appsecai.io/hubfs/og/appsecai-og-card.png
---

<https://www.appsecai.io/performance-metrics#body>

[![Logo. Blue. Horizontal](https://www.appsecai.io/hubfs/Logo.%20Blue.%20Horizontal.svg "Logo. Blue. Horizontal")](https://www.appsecai.io)

- Open submenu for Products 
  
    - [Expert Fix Automation](https://www.appsecai.io/expert-fix-automation)
    - [Expert Triage Automation](https://www.appsecai.io/expert-triage-automation-eta)
- Open submenu for By Role 
  
    - [Application Security Teams](https://www.appsecai.io/application-security-teams)
    - [Product Security](https://www.appsecai.io/product-security)
    - [CISOs](https://www.appsecai.io/application-security-for-cisos)
    - [Vulnerability Management](https://www.appsecai.io/vulnerability-management)
    - [Engineering Leaders](https://www.appsecai.io/engineering-security-automation)
- Open submenu for Resources 
  
    - [Blog](https://www.appsecai.io/blog)
    - [Case Studies](https://www.appsecai.io/case-studies)
    - [AppSec - Complete Guide in AI Era](https://www.appsecai.io/application_security_complete_guide)
    - [Videos & Podcasts](https://www.appsecai.io/videos-podcasts)
    - [Return on Investment Calculator](https://www.appsecai.io/roi)
    - [Performance Metrics](https://www.appsecai.io/performance-metrics)
    - [AI Security Book](https://www.appsecai.io/the-ai-security-advantage-by-bruce-fram)
    - [Partners](https://www.appsecai.io/partners)
- [Pricing](https://www.appsecai.io/pricing)
- [About](https://www.appsecai.io/about)
  
   Show submenu for About 
  
    - [Leadership Team](https://www.appsecai.io/about#leadership)

- Open submenu for Products 
  
    - [Expert Fix Automation](https://www.appsecai.io/expert-fix-automation)
    - [Expert Triage Automation](https://www.appsecai.io/expert-triage-automation-eta)
- Open submenu for By Role 
  
    - [Application Security Teams](https://www.appsecai.io/application-security-teams)
    - [Product Security](https://www.appsecai.io/product-security)
    - [CISOs](https://www.appsecai.io/application-security-for-cisos)
    - [Vulnerability Management](https://www.appsecai.io/vulnerability-management)
    - [Engineering Leaders](https://www.appsecai.io/engineering-security-automation)
- Open submenu for Resources 
  
    - [Blog](https://www.appsecai.io/blog)
    - [Case Studies](https://www.appsecai.io/case-studies)
    - [AppSec - Complete Guide in AI Era](https://www.appsecai.io/application_security_complete_guide)
    - [Videos & Podcasts](https://www.appsecai.io/videos-podcasts)
    - [Return on Investment Calculator](https://www.appsecai.io/roi)
    - [Performance Metrics](https://www.appsecai.io/performance-metrics)
    - [AI Security Book](https://www.appsecai.io/the-ai-security-advantage-by-bruce-fram)
    - [Partners](https://www.appsecai.io/partners)
- [Pricing](https://www.appsecai.io/pricing)
- [About](https://www.appsecai.io/about)
  
   Show submenu for About 
  
    - [Leadership Team](https://www.appsecai.io/about#leadership)

- [Demo Video](https://www.appsecai.io/demo)
- [Schedule Demo](https://calendly.com/brucefram/30min)

- [Demo Video](https://www.appsecai.io/demo)
- [Schedule Demo](https://calendly.com/brucefram/30min)

# Transparent performance. Open-sourced results.

We publish our triage and fix accuracy on industry benchmarks. Every number below is backed by open-sourced results you can inspect yourself.

97%

Overall triage accuracy

93%

Automated fix rate

93.5%

False positive reduction

25,123

Findings published and open sourced

## Fix benchmarks — OWASP BenchmarkJava100

Expert Fix Automation (EFA) generated validated pull requests for 133 of 135 vulnerabilities across 6 CWE categories.

93%

Automated fix rate  
(133 / 135 vulns)

98.5%

Security validation  
pass rate

0

Security regressions  
introduced

1

##### Scan

SARIF input from any SAST scanner

2

##### Triage

AI classifies true vs false positives

3

##### Fix

EFA generates code remediation

4

##### Validate

Security, functionality & quality checks

[See all fix results on GitHub →](https://github.com/AppSecureAI/BenchmarkJava100-public)

## Triage benchmarks — OWASP Benchmark by scanner

AppSecAI triage accuracy compared to each scanner's native true-positive identification rate.

| Tool integration | Total findings | AppSecAI accuracy | FP reduction | Tool-only TP rate |
| --- | --- | --- | --- | --- |
| AppSecAI + SAST (aggregate) | 25,123 | 97.2% | 93.5% | — |
| GitHub CodeQL | 4,161 | 98.2% | 96.0% | 35.8% |
| Semgrep | 6,092 | 97.0% | 92.9% | 38.0% |
| SonarQube | 981 | 95.4% | 75.5% | 49.9% |
| Commercial Product 1 | 11,598 | 91.0% | 84.8% | 33.7% |
| Commercial Product 2 | 3,687 | 91.4% | 55.0% | 46.1% |

[Triage benchmarks on GitHub →](https://github.com/AppSecureAI/AppSecAI-Public-Benchmarks)   |   [Fix benchmarks on GitHub →](https://github.com/AppSecureAI/BenchmarkJava100-public)

## How we measure performance

#### OWASP Benchmark

Regular validation against OWASP's comprehensive security benchmark suite across all supported scanners.

#### Production validation

Performance measured across real production applications, not just synthetic test cases.

#### Continuous testing

New AI and deterministic triage techniques are evaluated weekly against our full benchmark suite.

## Test it with your own findings.

Upload your scanner results and see the triage in action. Initial results in 30 minutes.

[Schedule a Demo →](https://www.appsecai.io/contact)

[![Logo. White. Horizontal](https://www.appsecai.io/hubfs/Logo.%20White.%20Horizontal.svg "Logo. White. Horizontal")](https://www.appsecai.io/)

**Automation for   
Application Security Teams**

<https://www.linkedin.com/company/appsecai-inc/> <https://www.youtube.com/@AppSecAI>

- Products 
    - [Expert Fix Automation (EFA)](https://www.appsecai.io/expert-fix-automation)
    - [Expert Triage Automation (ETA)](https://www.appsecai.io/expert-triage-automation-eta)
    - [Try Now!](https://www.appsecai.io/try-now)

- By Role 
    - [Application Security Teams](https://www.appsecai.io/application-security-teams)
    - [Product Security](https://www.appsecai.io/product-security)
    - [Vulnerability Management](https://www.appsecai.io/vulnerability-management)
    - [CISOs](https://www.appsecai.io/application-security-for-cisos)
    - [Engineering Leaders](https://www.appsecai.io/engineering-security-automation)

- Resources 
    - [Blog](https://www.appsecai.io/blog)
    - [Case Studies](https://www.appsecai.io/case-studies)
    - [Videos & Podcasts](https://www.appsecai.io/videos-podcasts)
    - [AI Security Book](https://www.appsecai.io/the-ai-security-advantage-by-bruce-fram)
    - [Metrics](https://www.appsecai.io/performance-metrics)
    - [ROI Calculator](https://www.appsecai.io/roi)
    - [Pricing](https://www.appsecai.io/pricing)

- Company 
    - [About](https://www.appsecai.io/about)
    - [Partners](https://www.appsecai.io/partners)
    - [Careers](https://www.appsecai.io/careers)
    - [Contact Us](https://www.appsecai.io/contact)
    - [Privacy Policy](https://www.appsecai.io/privacy-policy)
    - [Terms of Service](https://www.appsecai.io/terms-of-service)
    - [Cookie Policy](https://www.appsecai.io/cookie-policy)

---

© 2026 AppSecAI, Inc. All rights reserved.

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://www.appsecai.io/#org",
  "@type" : "Organization",
  "contactPoint" : [ {
    "@type" : "ContactPoint",
    "availableLanguage" : [ "en" ],
    "contactType" : "sales",
    "email" : "automation@appsecai.io"
  }, {
    "@type" : "ContactPoint",
    "availableLanguage" : [ "en" ],
    "contactType" : "security",
    "email" : "security@appsecai.io"
  }, {
    "@type" : "ContactPoint",
    "availableLanguage" : [ "en" ],
    "contactType" : "privacy",
    "email" : "privacy@appsecai.io"
  } ],
  "logo" : {
    "@type" : "ImageObject",
    "height" : 112,
    "url" : "https://43994771.fs1.hubspotusercontent-na2.net/hubfs/43994771/Logos/Logo.%20Blue.%20Stacked-1.png",
    "width" : 112
  },
  "name" : "AppSecAI, Inc.",
  "sameAs" : [ "https://www.linkedin.com/company/appsecai-inc/", "https://www.youtube.com/@AppSecAI" ],
  "url" : "https://www.appsecai.io/"
}
```

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://www.appsecai.io/#website",
  "@type" : "WebSite",
  "inLanguage" : "en-US",
  "name" : "AppSecAI",
  "publisher" : {
    "@id" : "https://www.appsecai.io/#org"
  },
  "url" : "https://www.appsecai.io/"
}
```

```json
{
  "@context" : "https://schema.org",
  "@type" : "BreadcrumbList",
  "itemListElement" : [ {
    "@type" : "ListItem",
    "item" : "https://www.appsecai.io/",
    "name" : "Home",
    "position" : 1
  }, {
    "@type" : "ListItem",
    "item" : "https://www.appsecai.io/performance-metrics",
    "name" : "Performance Metrics",
    "position" : 2
  } ]
}
```

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://www.appsecai.io/performance-metrics/#webpage",
  "@type" : "WebPage",
  "about" : {
    "@id" : "https://www.appsecai.io/#org"
  },
  "breadcrumb" : {
    "@type" : "BreadcrumbList",
    "itemListElement" : [ {
      "@type" : "ListItem",
      "item" : "https://www.appsecai.io/",
      "name" : "Home",
      "position" : 1
    }, {
      "@type" : "ListItem",
      "item" : "https://www.appsecai.io/",
      "name" : "Resources",
      "position" : 2
    }, {
      "@type" : "ListItem",
      "item" : "https://www.appsecai.io/performance-metrics",
      "name" : "Performance Metrics",
      "position" : 3
    } ]
  },
  "description" : "Transparent, open-sourced results for vulnerability triage and remediation. 97.2% aggregate triage accuracy and 93% automated fix rate on industry benchmarks.",
  "inLanguage" : "en-US",
  "isPartOf" : {
    "@id" : "https://www.appsecai.io/#website"
  },
  "mainEntity" : {
    "@type" : "Dataset",
    "creator" : {
      "@id" : "https://www.appsecai.io/#org"
    },
    "description" : "Open-sourced triage and remediation performance data benchmarked against OWASP and industry-standard vulnerability test suites with 25,000+ examples.",
    "license" : "https://www.appsecai.io/terms-of-service",
    "measurementTechnique" : "OWASP Benchmark, internal test suites, real-world vulnerability datasets",
    "name" : "AppSecAI Performance Benchmark Results",
    "variableMeasured" : [ {
      "@type" : "PropertyValue",
      "name" : "Triage Accuracy",
      "unitText" : "percent",
      "value" : "97.2%"
    }, {
      "@type" : "PropertyValue",
      "name" : "Fix Accuracy",
      "unitText" : "percent",
      "value" : "93%"
    }, {
      "@type" : "PropertyValue",
      "name" : "Benchmark Examples",
      "unitText" : "examples",
      "value" : "25000+"
    } ]
  },
  "name" : "AppSecAI Performance Metrics | 97% Triage Accuracy & 93% Fix Rate",
  "publisher" : {
    "@id" : "https://www.appsecai.io/#org"
  },
  "url" : "https://www.appsecai.io/performance-metrics"
}
```