SESAA is a framework where an LLM agent begins with no rules and iteratively evolves readable joern queries for static analysis, guided only by a second LLM critic without ground-truth labels. It reaches a mean F1 of 0.742 on the OWASP Benchmark for Python and detected 10 of 19 later CVEs in a pilot.

— via arXiv Software Engineering, Rui Melo, Andre Duarte, Aditya Oke, Shubham Gandhi, Nachiket Kotalwar, Rui Abreu, Lei Li, Carolyn Rose