# Reduce SAST false positives with agentic evaluation and Bits Memories

DevFeed: [Reduce SAST false positives with agentic evaluation and Bits Memories](<https://devfeed.tech/articles/reduce-sast-false-positives-with-agentic-evaluation-and-bits-memories-2307.md>)

Original publisher: [Read original article](<https://www.datadoghq.com/blog/sast-triage-agentic-evaluation-bits-memories/>)

Author: Cole Maring

Published: 2026-07-06T00:00:00Z

Content type: article

Language: en

Sources: [Datadog | The Monitor blog](<https://devfeed.tech/sources/datadog-the-monitor-blog.md>)

Topics: [Static code analysis](<https://devfeed.tech/topics/static-code-analysis.md>), [Application Security](<https://devfeed.tech/topics/application-security.md>), [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [bits ai](<https://devfeed.tech/topics/bits-ai.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [agentic](<https://devfeed.tech/tags/agentic.md>), [ai](<https://devfeed.tech/tags/ai.md>), [analysis](<https://devfeed.tech/tags/analysis.md>), [application-security](<https://devfeed.tech/tags/application-security.md>), [bits-ai](<https://devfeed.tech/tags/bits-ai.md>), [code](<https://devfeed.tech/tags/code.md>), [code-security](<https://devfeed.tech/tags/code-security.md>), [developer](<https://devfeed.tech/tags/developer.md>), [devsecops](<https://devfeed.tech/tags/devsecops.md>), [learn](<https://devfeed.tech/tags/learn.md>), [post](<https://devfeed.tech/tags/post.md>), [security](<https://devfeed.tech/tags/security.md>), [threat-detection](<https://devfeed.tech/tags/threat-detection.md>), [tools](<https://devfeed.tech/tags/tools.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [vulnerability-management](<https://devfeed.tech/tags/vulnerability-management.md>)

## AI overview

Datadog's Static Code Analysis uses Bits AI agentic evaluation to investigate SAST findings across a repository, combining related code paths, callers, and validators with organization-specific knowledge from Bits Memories. The goal is to distinguish true vulnerabilities from false positives and speed security triage.

## Source excerpt

Learn how Bits AI in Datadog Static Code Analysis uses repository-wide reasoning and custom context to help make security triage faster and more accurate.