SCN-01
AI-Native Scanner Coverage
The scanner evaluates AI-specific code and workflow surfaces that conventional AppSec categories do not fully describe.
coverage matrix
SCN-01
AI-Native Scanner Coverage
The scanner evaluates AI-specific code and workflow surfaces that conventional AppSec categories do not fully describe.
Matrix showing scanner coverage across prompts, retrieval, agents, tools, MCP, authority, evidence, and lifecycle stages.
| Discovery | Analysis | Evidence | Retest | |
|---|---|---|---|---|
| Prompts and instructionsSystem prompts, templates, policy text, and instruction boundaries. | Covered | Covered | Covered | Covered |
| Retrieval and contextCorpus access, provenance, tenant boundaries, and prompt assembly. | Covered | Covered | Covered | Partial |
| Agents and orchestrationPlanning, delegation, memory, and workflow transitions. | Covered | Partial | Partial | Planned |
| Tools and MCPTool schemas, invocation boundaries, and consequence-bearing actions. | Covered | Covered | Covered | Partial |
| Identity and authorityUser, agent, service, and delegated permissions. | Covered | Partial | Partial | Planned |
| Evidence and lifecycleFinding state, provenance, remediation, and rescan behavior. | Not applicable | Covered | Covered | Covered |
CoveredPartialPlannedNot applicable