# FindSecBugs: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 2 judge labels across 1 category by 2 of 14 models. Page: https://www.gane.ai/index/it/vendors/findsecbugs

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Static application security testing](https://www.gane.ai/index/it/developer/static-application-security-testing/index.md) | 0% | 73 | 100% | 2 |

## And against it

- "Very low detection rates... Outdated rule sets that miss modern vulnerability patterns" (Kimi K2, SAST)
- "Only Java, shallow coverage, community\u2011maintained" (GLM 4.7 FlashX, SAST)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 0 | 0 | 0 | 0 | 0 |
| Perplexity Sonar | 0 | 0 | 0 | 0 | 0 |
| Grok 4.20 | 0 | 0 | 0 | 0 | 0 |
| Mistral Small | 0 | 0 | 0 | 0 | 0 |
| DeepSeek V4 Flash | 0 | 0 | 0 | 0 | 0 |
| Llama 4 Maverick | 0 | 0 | 0 | 0 | 0 |
| Qwen 3.7 Flash | 0 | 0 | 0 | 0 | 0 |
| Kimi K2 | 0 | 0 | 0 | 1 | 1 |
| GLM 4.7 FlashX | 0 | 0 | 0 | 1 | 1 |
| MiniMax M2.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-6 Luna | 0 | 0 | 0 | 0 | 0 |
| Muse Glimmer 30B | 0 | 0 | 0 | 0 | 0 |

## Sources returned with these answers

The sites and pages cited by the answers that named FindSecBugs, from 3 of the 4 answers that named it (only the models that return a source list).

### Domains cited

- bura.brunel.ac.uk: 2
- checkmarx.com: 2
- dl.acm.org: 2
- offensive360.com: 2
- safeguard.sh: 2
- appsecsanta.com: 1
- art.torvergata.it: 1
- arxiv.org: 1
- codeant.ai: 1
- codesignal.com: 1

### Pages cited

- https://bura.brunel.ac.uk/bitstream/2438/30374/1/FullText.pdf: 2
- https://checkmarx.com/learn/sast/open-source-vs-premium-sast-tools: 2
- https://offensive360.com/blog/sonarqube-alternatives-sast-tools-comparison: 2
- https://appsecsanta.com/sast-tools/checkmarx-alternatives: 1
- https://art.torvergata.it/handle/2108/394007: 1
- https://arxiv.org/html/2407.16235v1: 1
- https://checkmarx.com/learn/appsec/application-security-tools-categories-and-top-13-options: 1
- https://codeant.ai/blogs/best-sast-tools-comparison: 1

## What it publishes

Every page findsec.org exposes, read 2026-09-29: 113 addresses. By kind, pages and the last 90 days:

- blog: 92 pages, 0 in the last 90 days, latest undated
- comparison: 3 pages, 0 in the last 90 days, latest undated
- template or tool: 1 pages, 0 in the last 90 days, latest undated
- glossary or explainer: 1 pages, 0 in the last 90 days, latest undated

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.