I suspect the easier option is to use AI to review your own code. The arms race between developers and attackers might even make some of the AI valuations come true.