DerAI-Lite: AI triage and code fix on the same server as the scanner, no GPU needed

You don’t usually think about graphic cards when it comes to self-hosted static analysis. Code scanning doesn’t need one. But on-premise AI models typically run on a GPU, and this requirement often limits these installations.

DerScanner now ships DerAI-Lite, a lightweight edition of our on-premise AI agents DerTriage and DerCodeFix. It needs less memory, runs without graphics cards and installs on the same server that already runs DerScanner SAST. Triage and fix suggestions work the same way as in the standard edition.

What do DerTriage and DerCodeFix do?

DerTriage runs after a static scan is complete and cuts false positives by up to 90%. It checks each finding for exploitability across data flows, framework patterns and business logic, so developers receive only the vulnerabilities that pose real risk. The rest never reach the development queue.

DerCodeFix then generates a fix for each prioritized finding, matched to the language, framework and exact location of the vulnerability. Developers review the ready fix and apply it, so remediation moves at the pace of review and nobody waits on a fix. Both agents cover all 43 languages DerScanner supports, from Java and C# to Delphi, COBOL, Perl and ABAP.

What changes for the security team with DerAI-Lite?

• No hardware. AI triage runs on the server that already hosts the scanner.

• One host for scanning and AI. The scanner and both agents share a single server, so there is no separate AI machine to place, patch and audit.

• The same air-gapped guarantees. No internet connection at runtime and no external API calls. Source code, findings and fix suggestions stay inside the perimeter, and DerScanner does not store customer code or train on it.

• The same workflow. Both agents turn on in the SAST scan settings. DerTriage marks each finding as Confirmed or Rejected, and DerCodeFix places the fix in the finding’s details, with the proposed change highlighted next to the original code.

DerAI-Lite is already available. Book a demo to see how DerTriage and DerCodeFix work, or read more about the on-premise AI agents.