Speaking

A 15-minute showcase at swiss made software’s IT’s ABOUT TECH evening on the theme “Hand’s on software engineering was yesterday, now it’s AI — Really?”. Not a tool talk. A story about what changed for a long-time engineer after Claude Opus 4.5 and Claude Code arrived, and what happens to a backlog of years-old ideas when the bottleneck stops being time.

Key takeaways:

• The bottleneck moved from translating thoughts into syntax to deciding what to build and whether the result is acceptable
• AI did not generate the ideas. It let existing ideas escape the notebook
• The human did not disappear. The human moved up the stack

ModSecurity with the OWASP Core Rule Set (CRS) is a powerful open-source WAF, but tuning false positives remains painful and time-consuming. This talk introduced a self-learning approach that uses generative AI to analyze blocked requests, determine legitimacy, and automatically generate tuning rules, reducing manual effort while keeping humans in the loop for approval.

Key takeaways:

• How generative AI can classify WAF false positives with high accuracy
• A practical pipeline for automated rule generation with human oversight
• Lessons learned from applying this approach in production environments

Media-friendly version: Using generative AI to automatically detect and fix WAF false positives, keeping ModSecurity effective without the tuning headache.