I recently tested Corgea, and it felt like a strong application security tool built for real developer workflows. It does more than just flag issues, because Corgea helps find, triage, and fix insecure code, packages, infrastructure, and containers in one place. I liked how it focuses on business logic flaws and other problems traditional scanners often miss.
The AI-powered auto-fix feature is the part that stood out most to me. It can generate suggested fixes and bring them into pull request workflows, which saves a lot of manual effort. The developer experience also feels polished, with integrations for common tools and clear remediation context.
My only concern is that Corgea is clearly aimed at teams that already have a mature security process, so smaller users may find it more than they need. Pricing also appears to be enterprise-focused rather than simple self-serve. Still, for teams that want speed, accuracy, and automation in AppSec, Corgea is impressive and practical.