Skip to main content

STO AppSec Agent

Last updated on

The AppSec Agent in Harness STO lets you explore STO data using natural language. Instead of navigating multiple dashboards or applying several filters, you can ask questions like "List all the issues of type secretin the project".

The AppSec agent retrieves the relevant information from STO and responds in an easy-to-read format.

Scope​

  • The AppSec Agent in STO is currently scoped to the project level, and cross-project queries are not supported. The agent can answer queries related to STO issues, pending exemptions, approved or rejected exemptions, and issue level insights.
  • If a question is not related to Harness STO, you’ll see the message: “The query is not related to Harness, as it is outside the scope of Harness functionalities.”
prerequisites & support
  • Make sure you enable the Harness AI at the account level settings.
  • Currently, the AppSec Agent is not supported on SMP.

Sample Questions​

The following are some examples of the types of questions you can ask the AppSec Agent along with sample responses:

  • Tell me the exemptions raised by the developers that needs to be reviewed.
  • Approve all pending exemptions in this project of issue type secret.
  • List all the issues of severity High in the project.

Caveats​

The AppSec agent displays up to 10 results by default for readability. For larger datasets, refine your query to narrow the output (for example: List me the next 10 issues of issue type SCA).

Feedback Mechanism​

Each response supports feedback so you can help improve the model:

Thumbs Up - Positive feedback.
Thumbs Down - Opens a comment box where you can describe what went wrong or what you expected.

Feedback signals are used by Harness to enhance future model versions.