Auto-Fix is not the Problem, The Signal is the Problem

Harry Wetherald argues that auto-fixing vulnerabilities introduces unnecessary risks due to a high rate of false positives. He suggests that AI should first analyze findings in context before generating fix suggestions for human review, eventually leading to automation. However, he emphasizes that the core issue lies in the quality of the signals produced by scanners, which often lack contextual information necessary for accurate assessments.