H

AI SAST

Developer tool

by Harness

AI SAST scans agent-generated code and provides AI-generated fix suggestions.

Find alternatives to AI SAST

What it does

• Code review

Features 8

• Secure AI codingScans AI-generated code in Cursor, Windsurf and Claude Code for vulnerabilities as it is written.
• Code property graphUses a code property graph to evaluate data flow and control flow, cutting false positives.
• AI confidence scoringScores every finding by true positive likelihood so teams can focus on real risks.
• Deep vulnerability detectionIdentifies business logic flaws such as IDOR and multi-file attack paths.
• Security Worker AgentsAutonomous agents handle orchestration, triage, prioritization and remediation end to end.
• AI skills for your teamClaude and MCP skills handle time-consuming security tasks for the security team.
• Agent marketplaceA place to browse and deploy agents and skills built for security teams.
• Skill and prompt scanningScans the skills and prompts that agents introduce to catch exposure before deployment.

Sources

Pricing

Official documentation · 15 Oct 2026

"For licensing details or to enable the Enterprise license, contact Harness Sales"

Description

Official documentation · 15 Oct 2026

"AI SAST scans agent-generated code"

What it does

Official documentation · 15 Oct 2026

"Get AI-generated fix suggestions"

Sold within

Official documentation · 15 Oct 2026

"Security Testing Agent's AI SAST"

Name

Official documentation · 15 Oct 2026

"Get started with Harness AI SAST"

URL

Official documentation · 15 Oct 2026

"Get started with Harness AI SAST"

Deployment

Official documentation · 15 Oct 2026

"Fully managed, cloud-hosted version of Harness."

Interfaces

Official documentation · 18 Oct 2026

Page: 'Find and fix vulnerabilities inside Cursor, Windsurf, and Claude Code without leaving the AI coding tool'.

Intended for

Official documentation · 18 Oct 2026

Page: 'AI SAST secures code for your whole team Developers AppSec DevOps Developers'.

Also from Harness

• Harness Platform Platform

  AI-native software delivery platform: pipelines and canary deployments, AI security testing, runtime API and AI protection, cost management and policy governance, driven by AI agents that recommend while people decide.

• Security Testing Agent AI agent

  Uses agents to triage and remediate software vulnerabilities.

• Runtime Protection Agent AI agent

  Blocks prompt injection and unsafe model output.

• Cost Management Agent AI agent

  Tracks cloud and AI spending and automatically fixes waste.

• AI SRE Application

  Correlates deployment, feature flag, and infrastructure changes during incidents.

• AI SCA Developer tool

  AI SCA applies reachability analysis and EPSS scoring to open-source risk detection.

• AI Posture Application

  AI Posture discovers AI assets and agents and assesses their security posture.

• AI Firewall Application

  AI Firewall blocks prompt injection, evasion, and malicious payloads targeting AI applications.

• AI and Cloud Costs Application

  AI and Cloud Costs translates natural-language governance intent into cloud rules and remediates violations automatically.

• Software Delivery Agent AI agent

  Automates CI/CD and infrastructure-as-code delivery.

• AI Evals Developer tool

  Scores AI-agent responses for faithfulness, relevance, and task completion.

• AgentTrace Developer tool

  Monitors AI-agent LLM calls, tool calls, and decisions.

• Harness AI Test Automation Developer tool

  Creates intent-based tests and runs them within CI/CD pipelines with AI-assisted failure analysis.

• AI Code Review Developer tool

  Reviews pull requests by grouping diffs by risk so the riskiest changes come first, enforcing required checks that cannot be bypassed, and citing delivery history and the knowledge graph for context.

• AI DLC Insights Application

  Engineering-intelligence module that tracks DORA metrics, developer productivity and AI coding-tool spend together: which AI tools teams use, token consumption by developer, team, agent and model, AI-authored code and its effect on delivery.

• Worker Agents Agent platform

  Governed AI agents defined in a committed file that run inside Harness pipelines on events such as CI failures and pull requests, with prebuilt agents for autofix, code review, code coverage, feature-flag cleanup, manifest remediation and IaCM remediation.

• API Advanced Protection Application

  Detects and blocks API attacks, bots and Layer 7 DDoS with behavioral AI trained on live traffic, covering credential stuffing, account takeover and business-logic abuse such as BOLA and mass assignment.

Open Harness in the directory

Something wrong here? Send a correction — quote this product id: harness-ai-sast.