Skip to main content

Overview

Shift is the Cysmiq AI security assistant. It responds inside the vulnerability comment thread and uses the vulnerability context to explain issues or suggest remediation steps.

How to ask Shift

  • In a vulnerability comment, mention @Shift
  • Use the quick actions Generate a fix or Explain this further to insert a prompt
  • Edit the prompt to focus on the evidence or remediation detail you need
  • Ask in your preferred language; Shift replies in the language of your latest message unless you request another language
  • Shift responds as a comment and streams the answer as it is generated

What Shift uses as context

  • The vulnerability detail view, including type specific context
  • Code and call chain context when available
  • Existing comments in the thread

What Shift provides

  • Code vulnerabilities: focused fixes that modify only the necessary code
  • Dependency vulnerabilities: upgrade or patch guidance based on the advisory and package data
  • Secrets: rotation guidance and secure handling recommendations

Notes

  • Shift only responds to security related questions about the current vulnerability