---
id: 8927
title: "Can AI find them all? - A case study on ConcreteCMS"
source_domain: tenzai.com
source_url: "https://www.tenzai.com/blog/can-ai-find-them-all---a-case-study-on-concretecms"
published_at: "2026-10-04T00:00:00Z"
tags: ["ai-security", "case-study", "vulnerability-discovery", "ai-agent", "coverage", "concretecms"]
phying_url: "https://phying.com/item/8927"
lang: en
---

# Can AI find them all? - A case study on ConcreteCMS

## Summary

Tenzai compared leading SAST tools and found none of them are good enough to stand on their own. Without checking what's exploitable, we get a mixture of irrelevant and low priority findings with a few amazing results.

## Intelligence Metadata

- **Sources:** tenzai.com
- **Published:** 2026-10-04T00:00:00Z
- **Original:** https://www.tenzai.com/blog/can-ai-find-them-all---a-case-study-on-concretecms
- **Phying News:** https://phying.com/item/8927