{
  "schema_version": "1.0",
  "publisher": "AI Release",
  "article": {
    "title": "INFERA AI.SafeCode builds an attack surface map and hits LLMs before release",
    "canonical_url": "https://ai-release.org/posts/infera-ai-safecode-stroit-kartu-poverhnosti-ataki-i-bet-po-llm-do-reli-a281a7a4_en.html",
    "language": "en",
    "article_type": "news",
    "published_at": "2026-11-13T00:00:00+00:00",
    "updated_at": "2026-11-13T00:00:00+00:00"
  },
  "summary": "INFERA AI.SafeCode assembles a project's attack surface from SAST, SCA, secret scanning, DAST, and reconnaissance of the running application. The map shows which API entry point can actually reach a dangerous sink: SQL injection, command injection, insecure deserialization, sensitive data leaks.",
  "topics": [
    "cybersecurity",
    "AppSec",
    "AI",
    "LLM",
    "SAST",
    "MachineLearning",
    "neural networks"
  ],
  "entities": [
    {
      "id": "E-SRC",
      "name": "habr.com",
      "type": "source",
      "description": "source domain",
      "url": "https://habr.com/ru/companies/infera_security/articles/1107378/"
    },
    {
      "id": "E-T1",
      "name": "cybersecurity",
      "type": "topic",
      "description": "publication tag",
      "url": null
    },
    {
      "id": "E-T2",
      "name": "AppSec",
      "type": "topic",
      "description": "publication tag",
      "url": null
    },
    {
      "id": "E-T3",
      "name": "AI",
      "type": "topic",
      "description": "publication tag",
      "url": null
    },
    {
      "id": "E-T4",
      "name": "LLM",
      "type": "topic",
      "description": "publication tag",
      "url": null
    },
    {
      "id": "E-T5",
      "name": "SAST",
      "type": "topic",
      "description": "publication tag",
      "url": null
    },
    {
      "id": "E-T6",
      "name": "MachineLearning",
      "type": "topic",
      "description": "publication tag",
      "url": null
    },
    {
      "id": "E-T7",
      "name": "neural networks",
      "type": "topic",
      "description": "publication tag",
      "url": null
    },
    {
      "id": "E-AIR",
      "name": "AI Release",
      "type": "publisher",
      "description": "published the article",
      "url": "https://ai-release.org/"
    }
  ],
  "claims": [
    {
      "id": "AR-INFERAAISA-001",
      "statement": "INFERA AI.SafeCode assembles a project's attack surface from SAST, SCA, secret scanning, DAST, and reconnaissance of the running application.",
      "claim_type": "reported_fact",
      "confidence": "not_assessed",
      "source_type": "publication source",
      "verification_status": "reported_unverified",
      "source_url": "https://habr.com/ru/companies/infera_security/articles/1107378/",
      "article_anchor": "#ai-claim-001",
      "evidence_excerpt": "INFERA AI.SafeCode assembles a project's attack surface from SAST, SCA, secret scanning, DAST, and reconnaissance of the running application."
    },
    {
      "id": "AR-INFERAAISA-002",
      "statement": "The map shows which API entry point can actually reach a dangerous sink: SQL injection, command injection, insecure deserialization, sensitive data leaks.",
      "claim_type": "reported_fact",
      "confidence": "not_assessed",
      "source_type": "publication source",
      "verification_status": "reported_unverified",
      "source_url": "https://habr.com/ru/companies/infera_security/articles/1107378/",
      "article_anchor": "#ai-claim-002",
      "evidence_excerpt": "The map shows which API entry point can actually reach a dangerous sink: SQL injection, command injection, insecure deserialization, sensitive data leaks."
    },
    {
      "id": "AR-INFERAAISA-003",
      "statement": "A separate AI Red Team mode attacks an already running LLM application and tracks regressions between versions.",
      "claim_type": "reported_fact",
      "confidence": "not_assessed",
      "source_type": "publication source",
      "verification_status": "reported_unverified",
      "source_url": "https://habr.com/ru/companies/infera_security/articles/1107378/",
      "article_anchor": "#ai-claim-003",
      "evidence_excerpt": "A separate AI Red Team mode attacks an already running LLM application and tracks regressions between versions."
    },
    {
      "id": "AR-INFERAAISA-004",
      "statement": "INFERA Security published a breakdown of two modes of its AI.SafeCode product on its Habr blog — an 8-minute read .",
      "claim_type": "reported_fact",
      "confidence": "not_assessed",
      "source_type": "publication source",
      "verification_status": "reported_unverified",
      "source_url": "https://habr.com/ru/companies/infera_security/articles/1107378/",
      "article_anchor": "#ai-claim-004",
      "evidence_excerpt": "INFERA Security published a breakdown of two modes of its AI.SafeCode product on its Habr blog — an 8-minute read ."
    },
    {
      "id": "AR-INFERAAISA-005",
      "statement": "At the time of publication, the article had 4.5K views and a rating of 25.3 with 11 channel subscribers.",
      "claim_type": "reported_fact",
      "confidence": "not_assessed",
      "source_type": "publication source",
      "verification_status": "reported_unverified",
      "source_url": "https://habr.com/ru/companies/infera_security/articles/1107378/",
      "article_anchor": "#ai-claim-005",
      "evidence_excerpt": "At the time of publication, the article had 4.5K views and a rating of 25.3 with 11 channel subscribers."
    },
    {
      "id": "AR-INFERAAISA-006",
      "statement": "This is a vendor text about its own product, not independent research, and should be read with that caveat in mind.",
      "claim_type": "reported_fact",
      "confidence": "not_assessed",
      "source_type": "publication source",
      "verification_status": "reported_unverified",
      "source_url": "https://habr.com/ru/companies/infera_security/articles/1107378/",
      "article_anchor": "#ai-claim-006",
      "evidence_excerpt": "This is a vendor text about its own product, not independent research, and should be read with that caveat in mind."
    },
    {
      "id": "AR-INFERAAISA-007",
      "statement": "Here's the mechanics.",
      "claim_type": "reported_fact",
      "confidence": "not_assessed",
      "source_type": "publication source",
      "verification_status": "reported_unverified",
      "source_url": "https://habr.com/ru/companies/infera_security/articles/1107378/",
      "article_anchor": "#ai-claim-007",
      "evidence_excerpt": "Here's the mechanics."
    },
    {
      "id": "AR-INFERAAISA-008",
      "statement": "AppSec used to live in checkpoints: static code analysis, dependency checks, manual pentesting before release, occasionally dynamic scanning.",
      "claim_type": "reported_fact",
      "confidence": "not_assessed",
      "source_type": "publication source",
      "verification_status": "reported_unverified",
      "source_url": "https://habr.com/ru/companies/infera_security/articles/1107378/",
      "article_anchor": "#ai-claim-008",
      "evidence_excerpt": "AppSec used to live in checkpoints: static code analysis, dependency checks, manual pentesting before release, occasionally dynamic scanning."
    }
  ],
  "relationships": [
    {
      "subject": "habr.com",
      "predicate": "reports on",
      "object": "INFERA AI.SafeCode builds an attack surface map and hits LLMs before release",
      "claim_id": "AR-INFERAAISA-001"
    },
    {
      "subject": "AI Release",
      "predicate": "publishes",
      "object": "INFERA AI.SafeCode builds an attack surface map and hits LLMs before release",
      "claim_id": "AR-INFERAAISA-001"
    }
  ],
  "questions_and_answers": [
    {
      "question": "What is this article about?",
      "answer": "INFERA AI.SafeCode builds an attack surface map and hits LLMs before release. INFERA AI.SafeCode assembles a project's attack surface from SAST, SCA, secret scanning, DAST, and reconnaissance of the running application.",
      "claim_ids": [
        "AR-INFERAAISA-001"
      ],
      "article_anchor": "#ai-knowledge"
    },
    {
      "question": "What happened?",
      "answer": "INFERA AI.SafeCode assembles a project's attack surface from SAST, SCA, secret scanning, DAST, and reconnaissance of the running application. The map shows which API entry point can actually reach a dangerous sink: SQL injection, command injection, insecure deserialization, sensitive data leaks. A separate AI Red Team mode attacks an already running LLM application and tracks regressions between versions.",
      "claim_ids": [
        "AR-INFERAAISA-001",
        "AR-INFERAAISA-002",
        "AR-INFERAAISA-003"
      ],
      "article_anchor": "#ai-knowledge"
    },
    {
      "question": "Who is the source?",
      "answer": "habr.com: https://habr.com/ru/companies/infera_security/articles/1107378/",
      "claim_ids": [],
      "article_anchor": "#ai-knowledge"
    },
    {
      "question": "What remains unknown?",
      "answer": "The article reports the cited source; independent verification and full details are not provided.",
      "claim_ids": [],
      "article_anchor": "#ai-knowledge"
    }
  ],
  "limitations": [
    "No independent verification is provided.",
    "Full details, dates and official documents may be missing.",
    "The article reports a source rather than being the primary source."
  ],
  "citation": {
    "preferred_citation": "AI Release. «INFERA AI.SafeCode builds an attack surface map and hits LLMs before release». 2026-11-13. https://ai-release.org/posts/infera-ai-safecode-stroit-kartu-poverhnosti-ataki-i-bet-po-llm-do-reli-a281a7a4_en.html",
    "canonical_url": "https://ai-release.org/posts/infera-ai-safecode-stroit-kartu-poverhnosti-ataki-i-bet-po-llm-do-reli-a281a7a4_en.html",
    "publisher": "AI Release"
  }
}