VulnerAI: GPT Based Web Application Vulnerability Detection

Software vulnerabilities have been a major threat to everyone and have been exploited to gain unauthorized access to the systems. These vulnerabilities directly impact the confidentiality, integrity, and availability of these software systems. Traditional vulnerability detection tools are not effective and are unable to detect new and emerging vulnerabilities. There have been various incidents that were reported due to vulnerabilities in the web application that resulted in huge losses. It is vital to have accurate vulnerability detection tools. In this paper, the authors investigate and present the tool VulnerAI that can be used for vulnerability detection. VulnerAI uses the power of Generative Pre-trained Transformer (GPT) to provide users with the security insights of their code. The authors analyzed vulnerable PHP code snippets using GPT to identify potential security vulnerabilities. The authors also aim to demonstrate that GPT is a satisfactory tool for vulnerability detection, despite its reliability and use in solving many other tasks.