Im thinking about writing a blog post on how to use the new OpenCRE Chatbot as a software tester to improve #appsec.

So far i have been playing with it and im struggling to see the benefit over other LLM'S.

The 2 i have so far:

1. Answers are backed by known good knowledge from standards bodies.
2. A slightly easier way to navigate the OpenCRE nested system

Apart from this it feels like the answers are a little more vague and it struggles to deal with nuance.

Has anyone found a really good use for it and a workflow its excelled at.

BTW this is no criticism of OpenCRE or the chatbot, this project seems great and much needed. Id just like to figure out and teach where its strengths are, especially in software testing.

#softwaretesting #softwaredevelopment #securitytesting #owasp #opencre #TestEngineering #infosec