Security Agent

Integrates SonarQube (SAST) and Qualys (DAST) into pipelines; correlates and deduplicates findings.

RunningautonomySupervised

LangGraph pattern

Planner → Executor → Verifier

Node 1

Planner

Builds plan from JIRA/Confluence context

GPT-4.1 Mini

Node 2

Executor

Calls typed tools, drafts artifacts

GPT-5.1

Node 3

Verifier

Cross-checks output against acceptance criteria

GPT-4.1 Mini

Delivery contract

Outputs and constraints

This agent produces artifacts in SonarQube, Qualys, Azure Pipelines and escalates to a human reviewer at every stage gate. All runs are logged with full prompt/tool traces for audit.

State

Current

Status: Running
Autonomy: autonomySupervised
Owner: Hadeel Saif
Last run: 7 min ago
Success rate: 91%
Avg tokens / run: 12,600

Environments

Available in

DEVUATPREPRODPROD