Time to exploit versus time to patch

Sonar moves the pen tester's access-control checklist into the build pipeline

Sonar's Hunter Agent goes after broken access control, business-logic and session-management flaws that the company says used to need manual testing. It reports through CI/CD, where gates have only held rule matches.