Introduction to Sorts

Artificial intelligence (AI) is revolutionizing various fields by providing tools that augment human capabilities. Fluid Attacks leverages the power of AI to enhance the value it delivers to its customers. Specifically, AI enables Fluid Attacks’ pentesters to start reporting vulnerabilities in your applications earlier than otherwise and allows the creation of software features to automatically provide fix suggestions.

File prioritization with Sorts

Fluid Attacks has developed an AI-powered tool called Sorts. This tool helps identify the likelihood that files in a Git repository contain security vulnerabilities, so they can be prioritized for manual security testing. Sorts achieves this by analyzing information about vulnerable files on Fluid Attacks’ platform and employing machine learning to train an ever-evolving model that predicts the vulnerability probability of files.

Ways to utilize Sorts

Sorts can be used in two ways:

• Integrated with the Advanced plan: When you subscribe to the Advanced plan of Fluid Attacks’ Continuous Hacking, a certified hacking team utilizes Sorts to expedite the vulnerability discovery process. This is particularly beneficial for the inspection of repositories containing hundreds or thousands of files, as Sorts helps prioritize assessment efforts.
• As a free and open-source standalone tool: This option allows you to use Sorts as a command-line interface (CLI) tool to analyze your source code repository and generate a report in your preferred format (JSON or CSV), or configure the tool to run in your CI/CD pipeline. Detailed instructions can be found in the Sorts user guide .