> ## Documentation Index
> Fetch the complete documentation index at: https://docs.cysmiq.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Ask Shift

> Ask Shift to explain a vulnerability, answer follow-up questions, and suggest a focused remediation.

Shift is Cysmiq's AI security assistant. It works inside each vulnerability conversation and uses the available finding evidence to help you understand and remediate the issue.

<Info>Shift responses are generated for the current finding and may vary. Review suggested changes before applying them.</Info>

## Prerequisites

* A vulnerability you can access
* Permission to add comments to the vulnerability

## Steps

<Steps>
  <Step title="Review the evidence">
    Open the vulnerability and review its **Overview**, affected **Locations**, and **Analysis** when available. Understand the vulnerable behavior and available exploitability evidence before asking for a remediation.

    <Frame caption="Analysis provides the evidence Shift can help you interpret.">
      <img src="https://mintcdn.com/cysmiq/mogZZ6__Lz_SOAsn/images/guides/first-value/first-value-02-analysis.webp?fit=max&auto=format&n=mogZZ6__Lz_SOAsn&q=85&s=e945911be1d463d18f5f40914c4a0020" alt="Analysis tab showing the call hierarchy, exploitability reasoning, fixing advice, complexity, and confidence for a Flask debug finding." width="2880" height="2160" data-path="images/guides/first-value/first-value-02-analysis.webp" />
    </Frame>

    See [Vulnerability detail view](/vulnerability-management/vulnerability-detail-view) for the information available on each tab.
  </Step>

  <Step title="Ask for an explanation">
    In the conversation, select **Explain this further**. Cysmiq inserts an `@Shift` prompt into the comment field without sending it. Edit the question to focus on the evidence or remediation detail you need, then send it.

    <Frame caption="The quick action inserts an editable prompt for Shift.">
      <img src="https://mintcdn.com/cysmiq/03pkvnT_yk2MTR0Q/images/guides/shift-assisted-remediation/shift-01-explain-prompt.webp?fit=max&auto=format&n=03pkvnT_yk2MTR0Q&q=85&s=23dccc0aa00627628a7d54b8a9f83f9d" alt="Vulnerability conversation with Explain this further selected and an editable Shift prompt in the comment field." width="2880" height="2160" data-path="images/guides/shift-assisted-remediation/shift-01-explain-prompt.webp" />
    </Frame>

    You can also start with an empty comment and mention `@Shift` directly.
  </Step>

  <Step title="Use your preferred language">
    Ask the question in the language your team uses. Shift replies in the language of your latest message unless you request another language.

    <Frame caption="Example of Shift explaining the finding in German. Generated responses vary.">
      <img src="https://mintcdn.com/cysmiq/03pkvnT_yk2MTR0Q/images/guides/shift-assisted-remediation/shift-02-language-response.webp?fit=max&auto=format&n=03pkvnT_yk2MTR0Q&q=85&s=4123b833c6966d6956dd30159b0fcef7" alt="Vulnerability conversation showing a German question and a German response from Shift." width="2880" height="2160" data-path="images/guides/shift-assisted-remediation/shift-02-language-response.webp" />
    </Frame>

    Continue the conversation when you need a simpler explanation, a narrower answer, or clarification about specific evidence.
  </Step>

  <Step title="Generate a remediation">
    Select **Generate a fix** to insert a remediation request. Edit the prompt when you need to add repository constraints, preferred patterns, or a narrower scope.

    Shift uses context appropriate to the finding:

    * **Code vulnerabilities**: relevant source and analysis context when available
    * **Dependency vulnerabilities**: package, version, manifest, and advisory details
    * **Secrets**: location and available secret evidence

    <Frame caption="Example of a focused code remediation from Shift. Generated responses vary.">
      <img src="https://mintcdn.com/cysmiq/03pkvnT_yk2MTR0Q/images/guides/shift-assisted-remediation/shift-03-generated-fix.webp?fit=max&auto=format&n=03pkvnT_yk2MTR0Q&q=85&s=1015925f79cacfc521a96ae37fbb2473" alt="Vulnerability conversation showing Shift suggesting a focused code remediation for the Flask debug finding." width="2880" height="2160" data-path="images/guides/shift-assisted-remediation/shift-03-generated-fix.webp" />
    </Frame>
  </Step>

  <Step title="Review and verify the change">
    Treat the response as a proposed remediation. Before applying it:

    * Confirm that it addresses the vulnerable behavior and cited evidence
    * Check that referenced files, packages, and advisory details match the repository
    * Adapt the change to the repository's conventions and deployment model
    * Review the resulting diff and run the relevant tests
    * Push the change and confirm the follow-up scan resolves the finding

    See [Fix your first vulnerability](/guides/first-value) for the complete remediation and verification loop.
  </Step>
</Steps>

## Related documentation

* [AI assistant (Shift)](/vulnerability-management/ai-assistant)
* [Triage vulnerabilities](/guides/triage-vulnerabilities)
* [Vulnerability detail view](/vulnerability-management/vulnerability-detail-view)