The Ghost Exorcist engine is a deep contextual application security analysis engine that represents a new approach to application security. It is the antithesis of legacy tools that rely on pattern matching and static analysis to produce findings.

​
How it works

The Ghost platform brings together a unique combination of domain-specific indexing and pre-processing, advanced AI analysis, and a per-class analysis approach to produce accurate findings and business logic flaws that no signature-based or pattern-matching tool can detect. The Exorcist engine coordinates a context-aware analysis of your codebase using dynamic prompting, large language models augmented with situational and language specific knowledge, and a per-class analysis approach to produce accurate findings and business logic flaws that no signature-based or pattern-matching tool can detect.

Learn

Learn the intent and business purpose of the code

Index

Generate a data path specification of the codebase

Analyze

Construct an analysis matrix of data paths for key vulnerability classes

Output

Review findings and endpoint maps for each repo or project