Technical notes for teams stuck retesting by hand.

Latest blog

By Harshit · August 4, 2026 · 11 min read

Code Got Faster. Finding Bugs Got Faster. Retesting Did Not.

Sonar puts AI at 42% of committed code. Over the same period pull request review times rose 91%. Those two numbers are the whole story, and they are not about code.

Earlier notes

3 entries

autonomous pentesting tools 2026

By Harshit · March 31, 2026 · 8 min read

Autonomous Pentesting Tools 2026 and Where RiftX Fits

XBOW, Astra, Semgrep, Nuclei, and RiftX are not solving the same problem. Here is the practical way to compare them.

pentest false positives

By Harshit · March 28, 2026 · 8 min read

Why Pentest False Positives Keep Filling Security Reports

Pentest false positives waste consultant hours, delay reports, and make clients trust the report less. The cost is bigger than most teams admit.

Verdict architecture

By Harshit · March 25, 2026 · 9 min read

We Deleted Every Vulnerability Detector We Had Written

A detector can only fire on what its author already imagined. We replaced ours with a read-only judge that reads the raw evidence, a confidence floor that applies to good news and bad news alike, and an auditor that can only downgrade.

What gets published here.

Research notes, workflow arguments, and technical writing for teams that still spend too much time proving the obvious by hand. Not trend roundups, and nothing that goes up without the work behind it.

Get new posts by email