>Our current quota is, ca. 20% of AI-found "critical" issues are in fact critical.
What percentage of ALL returned AI security bugs are critical?
What percentage of ALL returned AI security bugs are critical?
Currently ca. 2%. Not sure this is a useful measure though, all of the batches had a whole bunch of low severity stuff (correctly flagged as such) that technically is indeed a security issue but practically irrelevant.