The process finds security-related code, scans for vulnerabilities, reproduces them in an isolated environment, tests whether they are exploitable, and generates candidate patches.
The process finds security-related code, scans for vulnerabilities, reproduces them in an isolated environment, tests whether they are exploitable, and generates candidate patches.
Human researchers review the results before reporting vulnerabilities and propose fixes to maintainers.