Patent ID: 11050777

Abstract:
A technology solution for remediating a cyberattack risk for a web application, including receiving device engagement data for the web application, receiving a security scanning analysis from a static application security testing (SAST) tool that includes a security flaw found in the web application and a severity level for the security flaw, and a plurality of other security flaws found in one or more other web applications and severity levels associated with each of the plurality of other security flaws. The technology solution includes determining a plurality of criticality adjustment values for the security flaw and each of the plurality of other security flaws, applying a criticality adjustment value to the security flaw to modify a severity level for the security flaw, prioritizing the security flaw and the plurality of other security flaws based on the modified severity level to generate prioritized security flaw action items, and mitigating the cyberattack risk for the web application according to the prioritized security flaw action items.