Skip to content

feat(ai-guard): expose tag probabilities in SDK responses#11063

Open
manuel-alvarez-alvarez wants to merge 1 commit intomasterfrom
malvarez/ai-guard-attach-tag-probabilities
Open

feat(ai-guard): expose tag probabilities in SDK responses#11063
manuel-alvarez-alvarez wants to merge 1 commit intomasterfrom
malvarez/ai-guard-attach-tag-probabilities

Conversation

@manuel-alvarez-alvarez
Copy link
Copy Markdown
Member

@manuel-alvarez-alvarez manuel-alvarez-alvarez commented Apr 8, 2026 •
edited by atlassian bot
Loading

What Does This Do

Attach tag probabilities dictionary to the AI Guard SDK responses.

Motivation

Additional Notes

Contributor Checklist

Jira ticket: APPSEC-61896

Note: Once your PR is ready to merge, add it to the merge queue by commenting /merge. /merge -c cancels the queue request. /merge -f --reason "reason" skips all merge queue checks; please use this judiciously, as some checks do not run at the PR-level. For more information, see this doc.

@manuel-alvarez-alvarez manuel-alvarez-alvarez requested a review from a team as a code owner April 8, 2026 09:29
@manuel-alvarez-alvarez manuel-alvarez-alvarez added type: enhancement Enhancements and improvements comp: asm waf Application Security Management (WAF) labels Apr 8, 2026
@pr-commenter
Copy link
Copy Markdown

pr-commenter bot commented Apr 8, 2026

Benchmarks

⚠️ Warning: Baseline build not found for merge-base commit. Comparing against the latest commit on master instead.

Startup

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master malvarez/ai-guard-attach-tag-probabilities
git_commit_date 1775589541 1775640330
git_commit_sha aa7c70f 3f6b18a
release_version 1.61.0-SNAPSHOT~aa7c70f2e7 1.61.0-SNAPSHOT~3f6b18aea2
See matching parameters
Baseline Candidate
application insecure-bank insecure-bank
ci_job_date 1775642187 1775642187
ci_job_id 1576471136 1576471136
ci_pipeline_id 106599628 106599628
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-1-v2hqgw6o 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-1-v2hqgw6o 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
module Agent Agent
parent None None

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 60 metrics, 11 unstable metrics.

Startup time reports for petclinic 
gantt
    title petclinic - global startup overhead: candidate=1.61.0-SNAPSHOT~3f6b18aea2, baseline=1.61.0-SNAPSHOT~aa7c70f2e7

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.066 s) : 0, 1066193
Total [baseline] (11.069 s) : 0, 11069230
Agent [candidate] (1.066 s) : 0, 1065662
Total [candidate] (11.132 s) : 0, 11131877
section appsec
Agent [baseline] (1.252 s) : 0, 1252051
Total [baseline] (11.155 s) : 0, 11154703
Agent [candidate] (1.25 s) : 0, 1250153
Total [candidate] (11.182 s) : 0, 11182057
section iast
Agent [baseline] (1.235 s) : 0, 1235043
Total [baseline] (11.324 s) : 0, 11324484
Agent [candidate] (1.226 s) : 0, 1225852
Total [candidate] (11.405 s) : 0, 11404933
section profiling
Agent [baseline] (1.193 s) : 0, 1192999
Total [baseline] (11.075 s) : 0, 11074701
Agent [candidate] (1.193 s) : 0, 1192714
Total [candidate] (11.171 s) : 0, 11171285
Loading
  • baseline results
Module Variant Duration Δ tracing
Agent tracing 1.066 s -
Agent appsec 1.252 s 185.857 ms (17.4%)
Agent iast 1.235 s 168.849 ms (15.8%)
Agent profiling 1.193 s 126.806 ms (11.9%)
Total tracing 11.069 s -
Total appsec 11.155 s 85.473 ms (0.8%)
Total iast 11.324 s 255.254 ms (2.3%)
Total profiling 11.075 s 5.471 ms (0.0%)
  • candidate results
Module Variant Duration Δ tracing
Agent tracing 1.066 s -
Agent appsec 1.25 s 184.491 ms (17.3%)
Agent iast 1.226 s 160.19 ms (15.0%)
Agent profiling 1.193 s 127.052 ms (11.9%)
Total tracing 11.132 s -
Total appsec 11.182 s 50.18 ms (0.5%)
Total iast 11.405 s 273.056 ms (2.5%)
Total profiling 11.171 s 39.408 ms (0.4%) 
gantt
    title petclinic - break down per module: candidate=1.61.0-SNAPSHOT~3f6b18aea2, baseline=1.61.0-SNAPSHOT~aa7c70f2e7

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.246 ms) : 0, 1246
crashtracking [candidate] (1.235 ms) : 0, 1235
BytebuddyAgent [baseline] (638.001 ms) : 0, 638001
BytebuddyAgent [candidate] (636.787 ms) : 0, 636787
AgentMeter [baseline] (29.573 ms) : 0, 29573
AgentMeter [candidate] (29.636 ms) : 0, 29636
GlobalTracer [baseline] (250.495 ms) : 0, 250495
GlobalTracer [candidate] (250.412 ms) : 0, 250412
AppSec [baseline] (32.236 ms) : 0, 32236
AppSec [candidate] (32.167 ms) : 0, 32167
Debugger [baseline] (60.422 ms) : 0, 60422
Debugger [candidate] (60.542 ms) : 0, 60542
Remote Config [baseline] (604.0 µs) : 0, 604
Remote Config [candidate] (605.796 µs) : 0, 606
Telemetry [baseline] (8.133 ms) : 0, 8133
Telemetry [candidate] (8.192 ms) : 0, 8192
Flare Poller [baseline] (9.028 ms) : 0, 9028
Flare Poller [candidate] (9.908 ms) : 0, 9908
section appsec
crashtracking [baseline] (1.235 ms) : 0, 1235
crashtracking [candidate] (1.22 ms) : 0, 1220
BytebuddyAgent [baseline] (662.877 ms) : 0, 662877
BytebuddyAgent [candidate] (662.892 ms) : 0, 662892
AgentMeter [baseline] (12.079 ms) : 0, 12079
AgentMeter [candidate] (12.031 ms) : 0, 12031
GlobalTracer [baseline] (249.882 ms) : 0, 249882
GlobalTracer [candidate] (249.567 ms) : 0, 249567
IAST [baseline] (24.635 ms) : 0, 24635
IAST [candidate] (24.62 ms) : 0, 24620
AppSec [baseline] (185.251 ms) : 0, 185251
AppSec [candidate] (184.89 ms) : 0, 184890
Debugger [baseline] (66.638 ms) : 0, 66638
Debugger [candidate] (65.743 ms) : 0, 65743
Remote Config [baseline] (613.566 µs) : 0, 614
Remote Config [candidate] (592.68 µs) : 0, 593
Telemetry [baseline] (8.707 ms) : 0, 8707
Telemetry [candidate] (8.621 ms) : 0, 8621
Flare Poller [baseline] (3.638 ms) : 0, 3638
Flare Poller [candidate] (3.569 ms) : 0, 3569
section iast
crashtracking [baseline] (1.251 ms) : 0, 1251
crashtracking [candidate] (1.218 ms) : 0, 1218
BytebuddyAgent [baseline] (808.656 ms) : 0, 808656
BytebuddyAgent [candidate] (801.946 ms) : 0, 801946
AgentMeter [baseline] (11.499 ms) : 0, 11499
AgentMeter [candidate] (11.388 ms) : 0, 11388
GlobalTracer [baseline] (240.824 ms) : 0, 240824
GlobalTracer [candidate] (239.217 ms) : 0, 239217
IAST [baseline] (26.722 ms) : 0, 26722
IAST [candidate] (25.776 ms) : 0, 25776
AppSec [baseline] (30.415 ms) : 0, 30415
AppSec [candidate] (32.561 ms) : 0, 32561
Debugger [baseline] (62.445 ms) : 0, 62445
Debugger [candidate] (57.677 ms) : 0, 57677
Remote Config [baseline] (1.145 ms) : 0, 1145
Remote Config [candidate] (2.96 ms) : 0, 2960
Telemetry [baseline] (12.201 ms) : 0, 12201
Telemetry [candidate] (13.287 ms) : 0, 13287
Flare Poller [baseline] (3.47 ms) : 0, 3470
Flare Poller [candidate] (3.502 ms) : 0, 3502
section profiling
crashtracking [baseline] (1.193 ms) : 0, 1193
crashtracking [candidate] (1.203 ms) : 0, 1203
BytebuddyAgent [baseline] (696.559 ms) : 0, 696559
BytebuddyAgent [candidate] (696.703 ms) : 0, 696703
AgentMeter [baseline] (9.236 ms) : 0, 9236
AgentMeter [candidate] (9.285 ms) : 0, 9285
GlobalTracer [baseline] (208.505 ms) : 0, 208505
GlobalTracer [candidate] (208.452 ms) : 0, 208452
AppSec [baseline] (32.759 ms) : 0, 32759
AppSec [candidate] (32.765 ms) : 0, 32765
Debugger [baseline] (66.26 ms) : 0, 66260
Debugger [candidate] (66.096 ms) : 0, 66096
Remote Config [baseline] (585.651 µs) : 0, 586
Remote Config [candidate] (575.72 µs) : 0, 576
Telemetry [baseline] (7.856 ms) : 0, 7856
Telemetry [candidate] (7.908 ms) : 0, 7908
Flare Poller [baseline] (3.596 ms) : 0, 3596
Flare Poller [candidate] (3.642 ms) : 0, 3642
ProfilingAgent [baseline] (94.753 ms) : 0, 94753
ProfilingAgent [candidate] (94.528 ms) : 0, 94528
Profiling [baseline] (95.341 ms) : 0, 95341
Profiling [candidate] (95.09 ms) : 0, 95090
Loading
Startup time reports for insecure-bank 
gantt
    title insecure-bank - global startup overhead: candidate=1.61.0-SNAPSHOT~3f6b18aea2, baseline=1.61.0-SNAPSHOT~aa7c70f2e7

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.065 s) : 0, 1065161
Total [baseline] (8.845 s) : 0, 8844618
Agent [candidate] (1.067 s) : 0, 1066803
Total [candidate] (8.867 s) : 0, 8867339
section iast
Agent [baseline] (1.228 s) : 0, 1227780
Total [baseline] (9.594 s) : 0, 9593840
Agent [candidate] (1.233 s) : 0, 1232999
Total [candidate] (9.606 s) : 0, 9605501
Loading
  • baseline results
Module Variant Duration Δ tracing
Agent tracing 1.065 s -
Agent iast 1.228 s 162.619 ms (15.3%)
Total tracing 8.845 s -
Total iast 9.594 s 749.222 ms (8.5%)
  • candidate results
Module Variant Duration Δ tracing
Agent tracing 1.067 s -
Agent iast 1.233 s 166.197 ms (15.6%)
Total tracing 8.867 s -
Total iast 9.606 s 738.162 ms (8.3%) 
gantt
    title insecure-bank - break down per module: candidate=1.61.0-SNAPSHOT~3f6b18aea2, baseline=1.61.0-SNAPSHOT~aa7c70f2e7

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.238 ms) : 0, 1238
crashtracking [candidate] (1.234 ms) : 0, 1234
BytebuddyAgent [baseline] (638.754 ms) : 0, 638754
BytebuddyAgent [candidate] (638.137 ms) : 0, 638137
AgentMeter [baseline] (29.658 ms) : 0, 29658
AgentMeter [candidate] (29.692 ms) : 0, 29692
GlobalTracer [baseline] (250.672 ms) : 0, 250672
GlobalTracer [candidate] (251.215 ms) : 0, 251215
AppSec [baseline] (32.252 ms) : 0, 32252
AppSec [candidate] (32.23 ms) : 0, 32230
Debugger [baseline] (59.886 ms) : 0, 59886
Debugger [candidate] (59.654 ms) : 0, 59654
Remote Config [baseline] (630.707 µs) : 0, 631
Remote Config [candidate] (598.087 µs) : 0, 598
Telemetry [baseline] (8.18 ms) : 0, 8180
Telemetry [candidate] (8.129 ms) : 0, 8129
Flare Poller [baseline] (7.496 ms) : 0, 7496
Flare Poller [candidate] (9.658 ms) : 0, 9658
section iast
crashtracking [baseline] (1.236 ms) : 0, 1236
crashtracking [candidate] (1.237 ms) : 0, 1237
BytebuddyAgent [baseline] (802.158 ms) : 0, 802158
BytebuddyAgent [candidate] (807.903 ms) : 0, 807903
AgentMeter [baseline] (11.387 ms) : 0, 11387
AgentMeter [candidate] (11.649 ms) : 0, 11649
GlobalTracer [baseline] (241.134 ms) : 0, 241134
GlobalTracer [candidate] (240.504 ms) : 0, 240504
IAST [baseline] (26.189 ms) : 0, 26189
IAST [candidate] (26.001 ms) : 0, 26001
AppSec [baseline] (31.538 ms) : 0, 31538
AppSec [candidate] (32.181 ms) : 0, 32181
Debugger [baseline] (60.771 ms) : 0, 60771
Debugger [candidate] (60.832 ms) : 0, 60832
Remote Config [baseline] (1.107 ms) : 0, 1107
Remote Config [candidate] (1.122 ms) : 0, 1122
Telemetry [baseline] (12.471 ms) : 0, 12471
Telemetry [candidate] (11.86 ms) : 0, 11860
Flare Poller [baseline] (3.478 ms) : 0, 3478
Flare Poller [candidate] (3.519 ms) : 0, 3519
Loading

Load

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master malvarez/ai-guard-attach-tag-probabilities
git_commit_date 1775589541 1775640330
git_commit_sha aa7c70f 3f6b18a
release_version 1.61.0-SNAPSHOT~aa7c70f2e7 1.61.0-SNAPSHOT~3f6b18aea2
See matching parameters
Baseline Candidate
application insecure-bank insecure-bank
ci_job_date 1775642741 1775642741
ci_job_id 1576471138 1576471138
ci_pipeline_id 106599628 106599628
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-2-6hmpjm1v 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-2-6hmpjm1v 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 2 performance improvements and 0 performance regressions! Performance is the same for 19 metrics, 15 unstable metrics.

scenario Δ mean agg_http_req_duration_p50 Δ mean agg_http_req_duration_p95 Δ mean throughput candidate mean agg_http_req_duration_p50 candidate mean agg_http_req_duration_p95 candidate mean throughput baseline mean agg_http_req_duration_p50 baseline mean agg_http_req_duration_p95 baseline mean throughput
scenario:load:petclinic:tracing:high_load better
[-1.564ms; -0.634ms] or [-8.477%; -3.435%]		 unsure
[-1.820ms; -0.219ms] or [-6.177%; -0.744%]		 unstable
[-15.011op/s; +42.324op/s] or [-6.008%; +16.940%]		 17.352ms 28.452ms 263.500op/s 18.451ms 29.472ms 249.844op/s
scenario:load:petclinic:no_agent:high_load better
[-2.074ms; -0.734ms] or [-10.896%; -3.858%]		 unsure
[-3.421ms; -0.463ms] or [-10.815%; -1.462%]		 unstable
[-10.685op/s; +46.872op/s] or [-4.472%; +19.619%]		 17.632ms 29.690ms 257.000op/s 19.036ms 31.632ms 238.906op/s
Request duration reports for petclinic 
gantt
    title petclinic - request duration [CI 0.99] : candidate=1.61.0-SNAPSHOT~3f6b18aea2, baseline=1.61.0-SNAPSHOT~aa7c70f2e7
    dateFormat X
    axisFormat %s
section baseline
no_agent (19.54 ms) : 19335, 19744
.   : milestone, 19540,
appsec (19.046 ms) : 18851, 19241
.   : milestone, 19046,
code_origins (17.894 ms) : 17718, 18071
.   : milestone, 17894,
iast (17.96 ms) : 17782, 18137
.   : milestone, 17960,
profiling (19.13 ms) : 18935, 19325
.   : milestone, 19130,
tracing (18.674 ms) : 18489, 18859
.   : milestone, 18674,
section candidate
no_agent (18.159 ms) : 17977, 18340
.   : milestone, 18159,
appsec (18.597 ms) : 18413, 18781
.   : milestone, 18597,
code_origins (17.788 ms) : 17613, 17964
.   : milestone, 17788,
iast (17.613 ms) : 17437, 17789
.   : milestone, 17613,
profiling (18.462 ms) : 18279, 18644
.   : milestone, 18462,
tracing (17.706 ms) : 17531, 17881
.   : milestone, 17706,
Loading
  • baseline results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 19.54 ms [19.335 ms, 19.744 ms] -
appsec 19.046 ms [18.851 ms, 19.241 ms] -493.511 µs (-2.5%)
code_origins 17.894 ms [17.718 ms, 18.071 ms] -1.645 ms (-8.4%)
iast 17.96 ms [17.782 ms, 18.137 ms] -1.58 ms (-8.1%)
profiling 19.13 ms [18.935 ms, 19.325 ms] -409.205 µs (-2.1%)
tracing 18.674 ms [18.489 ms, 18.859 ms] -865.563 µs (-4.4%)
  • candidate results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 18.159 ms [17.977 ms, 18.34 ms] -
appsec 18.597 ms [18.413 ms, 18.781 ms] 438.486 µs (2.4%)
code_origins 17.788 ms [17.613 ms, 17.964 ms] -370.112 µs (-2.0%)
iast 17.613 ms [17.437 ms, 17.789 ms] -545.66 µs (-3.0%)
profiling 18.462 ms [18.279 ms, 18.644 ms] 303.464 µs (1.7%)
tracing 17.706 ms [17.531 ms, 17.881 ms] -452.559 µs (-2.5%)
Request duration reports for insecure-bank 
gantt
    title insecure-bank - request duration [CI 0.99] : candidate=1.61.0-SNAPSHOT~3f6b18aea2, baseline=1.61.0-SNAPSHOT~aa7c70f2e7
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.241 ms) : 1229, 1253
.   : milestone, 1241,
iast (3.436 ms) : 3389, 3483
.   : milestone, 3436,
iast_FULL (5.942 ms) : 5883, 6002
.   : milestone, 5942,
iast_GLOBAL (3.735 ms) : 3673, 3797
.   : milestone, 3735,
profiling (2.084 ms) : 2064, 2104
.   : milestone, 2084,
tracing (1.903 ms) : 1886, 1920
.   : milestone, 1903,
section candidate
no_agent (1.229 ms) : 1217, 1242
.   : milestone, 1229,
iast (3.372 ms) : 3323, 3422
.   : milestone, 3372,
iast_FULL (6.084 ms) : 6023, 6146
.   : milestone, 6084,
iast_GLOBAL (3.641 ms) : 3582, 3700
.   : milestone, 3641,
profiling (2.225 ms) : 2203, 2247
.   : milestone, 2225,
tracing (1.929 ms) : 1913, 1944
.   : milestone, 1929,
Loading
  • baseline results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 1.241 ms [1.229 ms, 1.253 ms] -
iast 3.436 ms [3.389 ms, 3.483 ms] 2.195 ms (176.8%)
iast_FULL 5.942 ms [5.883 ms, 6.002 ms] 4.701 ms (378.7%)
iast_GLOBAL 3.735 ms [3.673 ms, 3.797 ms] 2.493 ms (200.9%)
profiling 2.084 ms [2.064 ms, 2.104 ms] 842.66 µs (67.9%)
tracing 1.903 ms [1.886 ms, 1.92 ms] 661.798 µs (53.3%)
  • candidate results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 1.229 ms [1.217 ms, 1.242 ms] -
iast 3.372 ms [3.323 ms, 3.422 ms] 2.143 ms (174.3%)
iast_FULL 6.084 ms [6.023 ms, 6.146 ms] 4.855 ms (394.9%)
iast_GLOBAL 3.641 ms [3.582 ms, 3.7 ms] 2.412 ms (196.2%)
profiling 2.225 ms [2.203 ms, 2.247 ms] 995.602 µs (81.0%)
tracing 1.929 ms [1.913 ms, 1.944 ms] 699.088 µs (56.9%)

Dacapo

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master malvarez/ai-guard-attach-tag-probabilities
git_commit_date 1775589541 1775640330
git_commit_sha aa7c70f 3f6b18a
release_version 1.61.0-SNAPSHOT~aa7c70f2e7 1.61.0-SNAPSHOT~3f6b18aea2
See matching parameters
Baseline Candidate
application biojava biojava
ci_job_date 1775642476 1775642476
ci_job_id 1576471141 1576471141
ci_pipeline_id 106599628 106599628
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-1-qauhjfj5 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-1-qauhjfj5 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 11 metrics, 1 unstable metrics.

Execution time for biojava 
gantt
    title biojava - execution time [CI 0.99] : candidate=1.61.0-SNAPSHOT~3f6b18aea2, baseline=1.61.0-SNAPSHOT~aa7c70f2e7
    dateFormat X
    axisFormat %s
section baseline
no_agent (15.012 s) : 15012000, 15012000
.   : milestone, 15012000,
appsec (15.039 s) : 15039000, 15039000
.   : milestone, 15039000,
iast (18.585 s) : 18585000, 18585000
.   : milestone, 18585000,
iast_GLOBAL (18.041 s) : 18041000, 18041000
.   : milestone, 18041000,
profiling (15.107 s) : 15107000, 15107000
.   : milestone, 15107000,
tracing (15.057 s) : 15057000, 15057000
.   : milestone, 15057000,
section candidate
no_agent (15.356 s) : 15356000, 15356000
.   : milestone, 15356000,
appsec (14.964 s) : 14964000, 14964000
.   : milestone, 14964000,
iast (18.188 s) : 18188000, 18188000
.   : milestone, 18188000,
iast_GLOBAL (17.981 s) : 17981000, 17981000
.   : milestone, 17981000,
profiling (15.105 s) : 15105000, 15105000
.   : milestone, 15105000,
tracing (15.051 s) : 15051000, 15051000
.   : milestone, 15051000,
Loading
  • baseline results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 15.012 s [15.012 s, 15.012 s] -
appsec 15.039 s [15.039 s, 15.039 s] 27.0 ms (0.2%)
iast 18.585 s [18.585 s, 18.585 s] 3.573 s (23.8%)
iast_GLOBAL 18.041 s [18.041 s, 18.041 s] 3.029 s (20.2%)
profiling 15.107 s [15.107 s, 15.107 s] 95.0 ms (0.6%)
tracing 15.057 s [15.057 s, 15.057 s] 45.0 ms (0.3%)
  • candidate results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 15.356 s [15.356 s, 15.356 s] -
appsec 14.964 s [14.964 s, 14.964 s] -392.0 ms (-2.6%)
iast 18.188 s [18.188 s, 18.188 s] 2.832 s (18.4%)
iast_GLOBAL 17.981 s [17.981 s, 17.981 s] 2.625 s (17.1%)
profiling 15.105 s [15.105 s, 15.105 s] -251.0 ms (-1.6%)
tracing 15.051 s [15.051 s, 15.051 s] -305.0 ms (-2.0%)
Execution time for tomcat 
gantt
    title tomcat - execution time [CI 0.99] : candidate=1.61.0-SNAPSHOT~3f6b18aea2, baseline=1.61.0-SNAPSHOT~aa7c70f2e7
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.489 ms) : 1477, 1500
.   : milestone, 1489,
appsec (3.878 ms) : 3653, 4104
.   : milestone, 3878,
iast (2.284 ms) : 2214, 2354
.   : milestone, 2284,
iast_GLOBAL (2.325 ms) : 2254, 2395
.   : milestone, 2325,
profiling (2.11 ms) : 2054, 2165
.   : milestone, 2110,
tracing (2.099 ms) : 2045, 2153
.   : milestone, 2099,
section candidate
no_agent (1.492 ms) : 1481, 1504
.   : milestone, 1492,
appsec (3.849 ms) : 3623, 4074
.   : milestone, 3849,
iast (2.288 ms) : 2219, 2358
.   : milestone, 2288,
iast_GLOBAL (2.328 ms) : 2258, 2399
.   : milestone, 2328,
profiling (2.111 ms) : 2056, 2167
.   : milestone, 2111,
tracing (2.106 ms) : 2051, 2161
.   : milestone, 2106,
Loading
  • baseline results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 1.489 ms [1.477 ms, 1.5 ms] -
appsec 3.878 ms [3.653 ms, 4.104 ms] 2.39 ms (160.5%)
iast 2.284 ms [2.214 ms, 2.354 ms] 795.402 µs (53.4%)
iast_GLOBAL 2.325 ms [2.254 ms, 2.395 ms] 836.238 µs (56.2%)
profiling 2.11 ms [2.054 ms, 2.165 ms] 621.034 µs (41.7%)
tracing 2.099 ms [2.045 ms, 2.153 ms] 610.707 µs (41.0%)
  • candidate results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 1.492 ms [1.481 ms, 1.504 ms] -
appsec 3.849 ms [3.623 ms, 4.074 ms] 2.357 ms (157.9%)
iast 2.288 ms [2.219 ms, 2.358 ms] 795.992 µs (53.3%)
iast_GLOBAL 2.328 ms [2.258 ms, 2.399 ms] 836.247 µs (56.0%)
profiling 2.111 ms [2.056 ms, 2.167 ms] 619.084 µs (41.5%)
tracing 2.106 ms [2.051 ms, 2.161 ms] 614.238 µs (41.2%)

@manuel-alvarez-alvarez manuel-alvarez-alvarez added comp: ai-guard AI Guard and removed comp: asm waf Application Security Management (WAF) labels Apr 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@smola smola smola approved these changes

@jandro996 jandro996 Awaiting requested review from jandro996 jandro996 is a code owner automatically assigned from DataDog/asm-java

@daniel-romano-DD daniel-romano-DD Awaiting requested review from daniel-romano-DD daniel-romano-DD is a code owner automatically assigned from DataDog/asm-java

Assignees

No one assigned

Labels

comp: ai-guard AI Guard type: enhancement Enhancements and improvements

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@manuel-alvarez-alvarez @smola