lukejkwarren

Thank you so very much for the detailed breakdown. The prohibitively high pricing of cybersecurity tooling is a big problem. PenZen comes in way on the low end, but this erodes trust in the brand. Tough one to navigate as I look to find my footing in the market. I wish I had a customer like you as I'd literally just build all of your feedback directly in.

Many of the points I've actually specifically catered for in my compliance report are reassuring. For example, linking CVEs, sensible layouts etc.

The application itself caters for helping actual devs triage, fix, etc., with the report catering to audit and compliance needs. I've tried to avoid baking this into the report as the tool itself allows devs to get AI remediation guidance. Dev's don't read these reports IMO but they would jump into the application and click a button to see what the fix is - I hope.

Thanks again. I appreciate the time taken to respond with such detail.

That’s the one! Apologies.

Using any other security scanning tools?

It's the big bummer with reasoning models, although they are improving a lot. I experimented with various reasoning models for my AI security scanner product but found the performance to just be far too slow.

Happy to answer any questions about how this works under the hood—like how I’m orchestrating OWASP ZAP in headless mode, how the AI layer generates fixes based on your stack, or how alerting and issue resolution are handled.

Also very open to feedback on what’s missing or what feels unnecessary. I’m trying to build something that’s genuinely useful for devs—not just another dashboard that gets ignored.