Provally

Provally is a cybersecurity startup building AutoProof, an AI-powered verification engine for DevSecOps teams that automatically proves which SAST vulnerabilities are real exploitable threats versus false positives. AutoProof ingests findings from tools like Semgrep and Opengrep, executes controlled proof-of-concept tests in a sandboxed environment, and delivers verified exploitability reports alongside patch pull requests for GitHub and GitLab. The platform targets security engineers overwhelmed by SAST noise, promising to reduce triage overhead by up to 90% with tiered plans from free to enterprise VPC deployments.