Skip to content

Signal Over Noise

Scanners like Burp, Nuclei, and Nessus are excellent at finding vulnerabilities and useless at telling you which ones matter.

Code Demo Video Cerebral Valley

Core trick

Pipeline normalizes scanner output, clusters duplicates, filters false positives, and self-audits its triage before ranking by exploitability and exposure.

Tags

securityagents

Description

Scanners like Burp, Nuclei, and Nessus are excellent at finding vulnerabilities and useless at telling you which ones matter. A single scan returns hundreds of raw findings — duplicates, false positives, and low-risk noise tangled up with the handful that could actually get you breached. Triaging that by hand costs a security engineer days per cycle. This is an autonomous triage and remediation agent. You give it raw scanner output plus a short description of your environment, and it runs a multi-stage pipeline: it normalizes the findings, clusters duplicates, filters false positives, prioritizes what remains by real exploitability and asset exposure, audits its own triage and corrects its mistakes, then produces owner-assigned remediation steps and an exportable report. A multi-day manual workflow becomes a sub-minute one — and it shows its work at every stage, so the output is auditable rather than a black box. It is strictly defensive: it triages and recommends fixes, and never generates exploits.
vulnsintelligencedb/vuln-triage-agent★ 10 forksJavaScriptMITCreated Jun 13, 2026 · last push Jun 13, 2026

README excerpt

# Vuln Triage Agent

**🔗 Live demo:** https://vuln-triage-agent.onrender.com

**Scanners find vulnerabilities. They don't triage them. This does.**

Burp Suite, Nuclei, and Nessus are excellent at *finding* issues and useless at telling you which ones matter. A single scan returns hundreds of raw findings — duplicates, false positives, and low-risk noise tangled up with the handful of issues that could actually get you breached. Triaging that by hand costs a security engineer days per cycle.

This is an autonomous triage and remediation agent. Feed it raw scanner output plus a short description of your environment, and it runs a multi-stage pipeline that normalizes findings, clusters duplicates, filters false positives, prioritizes by real exploitability and asset exposure, **audits its own triage and corrects its mistakes**, then produces owner-assigned remediation steps and an exportable report. A multi-day manual workflow becomes a sub-minute one — and it shows its work at every stage.

It is strictly **defensive**: it triages and recommends fixes. It does not generate exploits, proof-of-concept attacks, or offensive tooling.

---

## ⚠️ Hackathon attribution — what was built during the event

### Built during the hackathon (100% of this repository)
- **The 7-stage Claude orchestration pipeline** (`src/App.jsx`) — plan → normalize → dedupe/false-positive → prioritize → verify → remediate → self-grade.
- **The self-verification loop** — Claude audits its own prioritization,

Team