# The Cyber Killer

- **Event:** [Zero to Agent: Vercel x Deepmind Hackathon NYC](https://cerebralvalley.ai/e/zero-to-agent-nyc)
- **When:** Sat, Mar 21 at 9:00 AM – 10:00 PM (EDT)
- **Where:** 220 W 26th St, New York, NY
- **Team:** [Nandini Jain](https://cerebralvalley.ai/u/njain), [ARJAV VAKHARIA](https://cerebralvalley.ai/u/AJV)
- **GitHub:** https://github.com/arjav21093/sast-advisor
- **Demo video:** https://youtu.be/QFpvqrTiWD4
- **Gallery:** https://cerebralvalley.ai/e/zero-to-agent-nyc/hackathon/gallery
- **Page:** https://cerebralvalley.ai/e/zero-to-agent-nyc/hackathon/gallery/26

The SAST Preset Advisor is an agentic security intelligence platform designed to bridge the gap between high-level cybersecurity policies and low-level static analysis (SAST) configurations.
1. The Problem It Solves
SAST "Noise": Standard security scanners often produce thousands of false positives because they don't understand  specific architecture or the custom sanitizers you already have in place.
The Policy-to-Code Gap: High-level mandates (e.g., "All PII must be encrypted") are difficult to manually translate into technical rules for tools like Semgrep, Snyk, or CodeQL.
Configuration Overload: Security teams struggle to maintain custom presets for hundreds of different microservices, each with unique tech stacks and risk profiles.
2. How It Works
The platform uses Gemini 3.1 Pro to ingest three critical data points:
Architecture & Code:  tech stack, frameworks, and existing security logic.
Cyber Policy:  internal security mandates and industry standards (OWASP, NIST).
Ecosystem Context: The specific capabilities of  target SAST tool.
3. Why It Is Important
Precision Scanning: It automatically identifies "Redundant Rules" (vulnerabilities already handled by  framework) and disables them to reduce developer fatigue.
Custom Intelligence: It generates actual query snippets (e.g., Semgrep YAML) tailored to  specific internal sanitizers and logic.
Compliance Mapping: Every recommendation is mapped to a CWE ID and a specific Policy Requirement, providing immediate audit-readiness.
Accelerated Remediation: By providing a "Risk Dashboard" and a "Remediation Roadmap," it helps teams prioritize the vulnerabilities that actually matter to their specific business context.
In short: It turns "dumb" security scanning into context-aware intelligence, ensuring  security tools work for  architecture, not against it.

---

Markdown version of https://cerebralvalley.ai/e/zero-to-agent-nyc/hackathon/gallery/26. Site index for agents: https://cerebralvalley.ai/llms.txt · full text: https://cerebralvalley.ai/llms-full.txt