Corgea

Corgea traces real request paths instead of matching a CVE list, which is how it claims broken authentication and missing authz checks that rule engines skip.

Findings come with a generated fix and a confidence score so teams are not drowning in LLM hallucinations. The YC-backed scanner also covers SCA, secrets, IaC, and containers, but the core is first-party logic.