Unverified50% confidenceFactExact time
The false positive rate is a core metric of security detection, referring to the proportion of items flagged as vulnerabilities that are not actually exploitable; an excessively high false positive rate causes developers to experience alert fatigue and eventually ignore alerts.
1
Sources
50%
Confidence
Long-term
Relevance
10/30/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedA false positive means the scanner reported a vulnerability that does not actually exist, usually caused by misjudged version numbers, deviations in reading configuration, or overly broad rules.77% similarUnverifiedMisclassifications based on surface features rather than contextual semantics are known in the security field as 'false positives' and are a recognized pain point of current large-scale content moderation systems.77% similarUnverifiedSpontaneous reporting systems have limitations such as underreporting, misreporting, and the inability to establish causal relationships, but their signal-detection function is of significant value in identifying rare side effects.73% similarUnverifiedIn secret scanning scenarios, both false positives and false negatives carry extremely high costs: false negatives may lead to data breaches, while false positives overwhelm security teams with large volumes of invalid alerts73% similarUnverifiedErrors caused by the phase sensitivity problem do not raise errors, are invisible and are hard to reproduce, so users may encounter silent loss of key information in long-context tasks such as contract review, code analysis and legal retrieval.72% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1117471API
curl https://kongchang.com/api/v1/knowledge/claims/1117471MCP
get_claim(id=1117471)