java-security

JSEF v1.10.0 is a model-agnostic LLM evaluation toolchain released with 20+ new hard vulnerability samples, designed for assessing LLMs in Java and web security contexts.

JSEF security-teaching framework has added new categories for patch-regression side effects and long-range data flow, enhancing its benchmark for evaluating static analysis tools.

JSEF v1.4.0-benchmark has been released, adding 85 new samples to the Spring Boot 3.x Java vulnerability mining benchmark for improved security testing coverage and validation.

JSEF adds a vulnerability-hunting benchmark that scores SAST tools and LLMs on identical prompts, with 52 machine-readable checkpoints across difficulty levels, using Youden Index scoring. MIT licensed.