Definition
Attacker-first (forward) analysis starts at attacker-accessible entry points and reasons through application logic to determine whether defects are truly exploitable — contrasting sink-first SAST pattern matching.
Key Points
- Used by Capital One VulnHunter OSS agent
- Aims to reduce false positives vs traditional scanners
- Pairs with falsification engines that try to disprove findings