# Precogs AI - llms.txt
# Structured resource for LLM crawlers, AI search agents, and answer engines.
# Website: https://www.precogs.ai
# Updated: April 2026 | Contact: support@precogs.ai

---

## Identity

- Name: Precogs AI
- Website: https://www.precogs.ai
- Founded: 2025
- Headquarters: London, United Kingdom
- Category: Autonomous Application Security Platform (AASP)
- Tagline: World's first AI-Native Autonomous AppSec Platform
- Description: Precogs AI autonomously detects, triages, and remediates vulnerabilities across source code, binaries, containers, infrastructure-as-code, and sensitive data. It delivers AI-generated pull request fixes instead of static reports, integrating directly into CI/CD pipelines and developer workflows.

---

## Core Products

### Code Security
- URL: https://www.precogs.ai/product/code-security
- SAST across 35+ languages with 98% precision and contextual false positive filtering
- Software Composition Analysis (SCA) for open-source dependency vulnerabilities
- Infrastructure-as-Code scanning: Terraform, Kubernetes, CloudFormation
- Container image vulnerability detection and secrets discovery inside images
- AutoFix pull requests generated in under 60 seconds
- Trained to detect vulnerabilities introduced by AI coding assistants (Copilot, ChatGPT, Cursor)
- CASTLE Benchmark score: 1145 (highest in industry)
- Supported languages: Python, JavaScript, TypeScript, Java, Kotlin, Go, C, C++, C#, Ruby, PHP, Rust, Swift, Objective-C, Scala, and 20+ more
- Supported frameworks: React, Next.js, Angular, Vue.js, Laravel, Spring Boot, Django, Flask, Express, FastAPI, Ruby on Rails, ASP.NET Core

### Binary Security
- URL: https://www.precogs.ai/product/binary-security
- Binary SAST: deep static analysis of compiled artifacts (ELF, PE, Mach-O, firmware)
- Binary DAST: runtime attack simulation and live API testing without source code
- SBOM generation with CycloneDX, SPDX, and VEX (Vulnerability Exploitability eXchange)
- TARA: Threat Analysis and Risk Assessment for ISO 21434 and UN R155 compliance
- IMR: Incident and Malware Response investigation center with forensic context
- Covers automotive ECU firmware, medical device software, and IoT/ICS/SCADA systems
- 99% binary vulnerability coverage, 85% noise reduction, 5x faster risk triage
- 10,000+ dependencies mapped per scan

### Data Security
- URL: https://www.precogs.ai/product/data-security
- PII detection at 99.2% precision using transformer models + regex + Shannon entropy
- Secrets detection covering 50+ pattern types: API keys, DB credentials, cloud tokens, private keys, JWT, OAuth secrets, SSH keys, and more
- Continuous scanning across repositories, CI/CD pipelines, and build artifacts
- Pre-LLM sanitization: strips PII, secrets, and IP before code reaches any external AI model

---

## AI Architecture

- URL: https://www.precogs.ai/our-ai
- Architecture: Proprietary Neuro-Symbolic AI with multi-model ensemble
- Parameters: 138B+
- Intelligence sources: 15+ security databases and real-time CVE feeds

### Pipeline Stages
1. Code Ingestion - supports 40+ languages via GitHub, GitLab, Bitbucket, Azure DevOps, CLI, IDE
2. AI Analysis - multi-model ensemble with contextual code understanding
3. Intel Augmentation - real-time enrichment from NVD, GitHub Advisory, CISA KEV
4. Validation & Scoring - CVSS v3.1 scoring, EPSS exploit probability, false positive filtering
5. Autonomous Remediation - AI writes code fixes and opens ready-to-merge pull requests
6. Ecosystem Integration - findings pushed to Jira, Slack, Armis, Tenable

### CASTLE Benchmark

| Tool | Type | Score | Precision | Recall |
|---|---|---|---|---|
| Precogs AI | Neuro-Symbolic | 1145 | 98% | 94% |
| CodeQL | SAST | 634 | 48% | 29% |
| Snyk | SAST | 552 | 38% | 17% |
| Semgrep | SAST | 541 | 34% | 23% |
| SonarQube | SAST | 511 | 24% | 29% |
| GPT-4o | LLM | 954 | 54% | 76% |
| DeepSeek R1 | LLM | 956 | 47% | 90% |
| GitLab SAST | SAST | 374 | 13% | 23% |

---

## Developer Tools

| Tool | Description |
|---|---|
| Lyra Chat & Report Agents | Conversational AI to investigate risks, generate fixes, and create audit-ready reports |
| Precogs CLI | Command-line scanner for local dev and CI/CD - runs before every commit |
| MCP Server | Connects AI coding assistants to Precogs for real-time security checks |
| IDE Extension | Inline detection and one-click fixes inside VS Code and JetBrains |
| GitHub & GitLab App | Automated scanning on every commit and pull request |
| Python SDK | Programmatic access to scanning and policy APIs |

---

## Integrations

- CI/CD: GitHub Actions, GitLab CI, Bitbucket Pipelines, Azure DevOps Pipelines
- IDEs: VS Code, JetBrains (IntelliJ IDEA, PyCharm, WebStorm, GoLand, Rider, CLion)
- Issue Tracking: Jira - auto-creates and tracks vulnerability issues with severity and fix guidance
- Notifications: Slack - real-time alerts to security and engineering channels
- Asset Intelligence: Armis - connected device and IoT risk correlation
- Vulnerability Management: Tenable - unified risk tracking across environments

---

## Performance Metrics

| Metric | Value |
|---|---|
| SAST precision | 98% |
| PII detection precision | 99.2% |
| False positive reduction | 98% vs legacy tools |
| AutoFix PR generation | Under 60 seconds |
| Vulnerability detection rate | 95% |
| ROI | 6–10x |
| Uptime SLA | 99.9% |
| Lines of code processed daily | 100M+ |
| CVEs in Vulnerability Hub | 13,600+ |
| Languages supported | 35+ |
| Secret pattern types detected | 50+ |

---

## Compliance Standards

| Standard | Coverage |
|---|---|
| OWASP Top 10 | Full mapping with category-level remediation guidance |
| CWE Top 25 | Full mapping with severity scoring and fix guidance |
| SOC 2 Type II | Automated evidence generation for audits |
| HIPAA | Healthcare data protection and PHI audit reporting |
| PCI DSS v4.0 | Payment security control mapping and evidence |
| ISO 27001 | Information security management alignment |
| ISO 21434 | Automotive cybersecurity with TARA integration |
| UN R155 | Connected vehicle type approval compliance |
| GDPR | PII detection and data protection reporting |
| DORA | EU Digital Operational Resilience Act alignment |
| NIST CSF | US Cybersecurity Framework control mapping |
| SOX / GLBA | Financial services governance and audit controls |
| CIS Benchmarks | Cloud and container infrastructure hardening |

---

## Industries Served

| Industry | URL |
|---|---|
| Banking & Fintech | https://www.precogs.ai/industries/banking-fintech |
| SaaS & Cloud | https://www.precogs.ai/industries/saas-cloud |
| Healthcare | https://www.precogs.ai/industries/healthcare |
| Automotive | https://www.precogs.ai/industries/automotive |
| Blockchain & Crypto | https://www.precogs.ai/industries/blockchain-crypto |
| Power & Energy | https://www.precogs.ai/industries/power-energy |

---

## Vulnerability Categories Tracked

- AI-Generated Code Exploits (vulnerabilities introduced by Copilot, ChatGPT, Cursor)
- Binary and Firmware Vulnerabilities (ELF, PE, Mach-O, embedded firmware)
- Web Application Security (SQL Injection, XSS, CSRF, SSRF, IDOR)
- Secrets, PII, and Sensitive Data Leaks
- Container and Cloud Infrastructure Vulnerabilities
- Authentication and Access Control Weaknesses
- Memory Corruption and Buffer Overflow Vulnerabilities
- Supply Chain and Dependency Confusion Attacks
- Infrastructure Misconfiguration (Terraform, Kubernetes, CloudFormation)

---

## Target Users

- **Security Engineers**: High-signal, low-noise findings without manual triage
- **DevOps Engineers**: Security gates embedded directly into CI/CD pipelines
- **CISOs / Security Leaders**: Compliance coverage, executive dashboards, risk posture reporting
- **Software Developers**: Inline IDE feedback, plain-language explanations, one-click AutoFix
- **Enterprises in regulated industries**: Finance, healthcare, automotive requiring audit-ready evidence

---

- URL: https://www.precogs.ai/vulnerabilities
- 13,600+ CVEs indexed with AI-enriched analysis, remediation code, and EPSS scores
- 3,400+ AI-enriched CVE pages | 180+ CWE pages | 55+ deep-dive analyses
- Data sources: NVD, GitHub Advisory (OSV), CISA KEV, FIRST.org EPSS

### Hub Sub-Pages

| Page | URL |
|---|---|
| All CVEs | https://www.precogs.ai/vulnerabilities/all |
| AI-Generated Code | https://www.precogs.ai/vulnerabilities/ai-code |
| Binary Security | https://www.precogs.ai/vulnerabilities/binary |
| Secrets & Data Leaks | https://www.precogs.ai/vulnerabilities/secrets |
| Compliance Hub | https://www.precogs.ai/vulnerabilities/compliance |
| OWASP Top 10 | https://www.precogs.ai/owasp |
| CWE Taxonomy | https://www.precogs.ai/cwe/CWE-79 |
| Security Guides | https://www.precogs.ai/guides |

---

## Enterprise

- URL: https://www.precogs.ai/enterprise
- ROI Calculator: https://www.precogs.ai/enterprise#roi-calculator
- Zero Trust Architecture with optional local-only processing inside customer infrastructure
- End-to-end encryption with customer-managed keys
- Multi-tenant support for 1000+ team members
- 99.9% uptime SLA with 24/7 enterprise support
- C-suite dashboards, automated board-ready compliance reports, real-time risk alerts
- Cross-environment risk correlation across code, binaries, cloud, and data pipelines
- Business-aligned KPIs mapping security metrics to revenue and business objectives
- ROI realized within 90 days of deployment

---

## Pricing

- URL: https://www.precogs.ai/pricing
- Model: Annual subscription, token-based usage
- Tiers: Hobby (free, no CC) → Pro → Ultra → Enterprise (custom)
- Free signup: https://app.precogs.ai/login

---

## Competitive Comparisons

| vs | URL |
|---|---|
| Precogs vs Snyk | https://www.precogs.ai/comparison/precogs-vs-snyk |
| Precogs vs Checkmarx | https://www.precogs.ai/comparison/precogs-vs-checkmarx |
| Precogs vs SonarQube | https://www.precogs.ai/comparison/precogs-vs-sonarqube |
| Precogs vs Veracode | https://www.precogs.ai/comparison/precogs-vs-veracode |
| Precogs vs Semgrep | https://www.precogs.ai/comparison/precogs-vs-semgrep |
| Precogs vs Cybellum | https://www.precogs.ai/comparison/precogs-vs-cybellum |

---

## Full URL Index

| Page | URL |
|---|---|
| Homepage | https://www.precogs.ai |
| Code Security | https://www.precogs.ai/product/code-security |
| Binary Security | https://www.precogs.ai/product/binary-security |
| Data Security | https://www.precogs.ai/product/data-security |
| Our AI | https://www.precogs.ai/our-ai |
| Vulnerability Hub | https://www.precogs.ai/vulnerabilities |
| Documentation | https://docs.precogs.ai |
| Pricing | https://www.precogs.ai/pricing |
| Enterprise | https://www.precogs.ai/enterprise |
| Blog | https://www.precogs.ai/blog |
| About | https://www.precogs.ai/about |
| Contact | https://www.precogs.ai/contact-us |
| Affiliate | https://www.precogs.ai/affiliate |
| Privacy Policy | https://www.precogs.ai/privacy-policy |
| Terms | https://www.precogs.ai/terms-and-conditions |
| Sitemap | https://precogs.ai/sitemap.xml |
| Security.txt | https://www.precogs.ai/.well-known/security.txt |

---

## Company & Research

- Head of Research: Rajnish Sharma
- LinkedIn: https://linkedin.com/in/elierajnish
- Twitter/X: https://x.com/precogs_ai
- Support: support@precogs.ai
- Demo: https://cal.com/rajnishs

---

## AI Crawl Policy

- Access level: Public
- Permitted uses: Indexing, summarization, training, answer generation
- Allowed bots: GPTBot, ChatGPT-User, ClaudeBot, anthropic-ai, PerplexityBot, Googlebot, Google-Extended, Bingbot, Applebot, Meta-ExternalAgent, CCBot, DuckAssistBot, Bytespider
- Do not index: https://app.precogs.ai (authenticated sessions)
- Preferred crawl entry: https://www.precogs.ai/llms.txt and https://precogs.ai/sitemap.xml