# Leverage AI-powered vulnerability guidance

{% hint style="warning" %}
**Note**: AI recommendations are meant to supplement, not replace, security expertise. Always validate suggestions against your specific environment and security policies.
{% endhint %}

Helm provides AI-powered vulnerability guidance to help you fix or mitigate security vulnerabilities faster. Get actionable mitigation strategies, upgrade recommendations, and technology stack insights backed by source documentation.

### Get AI guidance for vulnerabilities

1. In the sidebar, click the **Vulnerabilities** item.
2. Select one or more vulnerabilities you want to review.
3. Click the **Get AI guidance** button in the toolbar.
4. Wait for the AI analysis to complete. If you haven't generated AI guidance for these vulnerabilities before, this may take a few minutes.
5. Review the comprehensive guidance panel that appears. The AI guidance panel provides:

* **Short-term mitigations**: Immediate workarounds and temporary fixes
* **Long-term solutions**: Permanent fixes and remediation strategies
* **Specific upgrade recommendations**: Exact versions and components to upgrade
* **Source documentation**: Links and references for validation and further research

### View affected technology stacks

{% hint style="warning" %}
This feature is currently in beta.
{% endhint %}

#### Make sure this column is visible on your Vulns list

1. In your **Vulnerabilities** list, click the **Columns** link at the top of the table.
2. Enable the **tech stack tags** column.

#### View affected technology stack insights

1. Click **Filters** in the toolbar to display all available component filters.
2. In the **Tech stack** section, select the tech stacks you'd like to check in the **Impacted tech stacks** filter. You can also check for explicitly **Not impacted tech stacks**, but these are less common. 
3. In the Affected tech stack column, you'll see orange warning badges with the name of the affected tech stack, or gray badges if the tech stack is explicitly listed as not affected in the sources we've referenced. If there are multiple affected tech stacks, click the X tech stacks badge to get aggregate information on how to mitigate these affected tech stacks. 
4. Scroll down to the **AI recommendations** section of the modal that displays.
5. Review detailed information about:
   * Affected technology stacks
   * Stack-specific upgrade recommendations
   * Targeted short-term mitigations
   * Supporting source documentation

### Understanding AI recommendations

#### What the AI analyzes

The AI system evaluates:

* Vulnerability details and severity
* Affected components and versions
* Available patches and updates
* Technology stack context
* Industry best practices

#### Types of recommendations

* **Immediate actions**: Steps you can take right away to reduce risk
* **Upgrade paths**: Specific version updates that address the vulnerability
* **Configuration changes**: Security settings that may mitigate the issue
* **Alternative solutions**: When direct fixes aren't available

### Best practices

#### Use AI guidance effectively

* **Start with high-severity vulnerabilities** for maximum impact
* **Validate recommendations** using the provided source documentation
* **Consider your environment** when implementing suggestions
* **Test changes** in non-production environments first

#### Manage multiple vulnerabilities

* **Group similar vulnerabilities** when requesting AI guidance
* **Prioritize based on exploitability** and business impact
* **Track implementation progress** in your issue management system
* **Document decisions** for future reference

### Current limitations

* **Beta feature**: Technology stack detection is still being refined
* **Source validation**: Always verify recommendations against official documentation
* **Environment-specific**: Some recommendations may not apply to all environments
* **Update frequency**: AI recommendations reflect information available at the time of generation

### Troubleshooting

#### AI guidance not available or disabled

* **Check permissions**: Ensure you have access to vulnerability details
* **Verify selection**: Make sure you've selected at least one vulnerability
* **Refresh the page**: Try reloading if the button doesn't appear

#### Tech stack tags not showing

* **Enable the column**: Make sure "tech stack tags" column is enabled
* **Clear cache**: Try clearing your browser cache if tags don't appear

#### Recommendations seem incorrect

* **Check source documentation**: Review the provided sources for context
* **Consider your environment**: Recommendations may need adaptation for your specific setup
* **Contact support**: Report issues to help improve AI accuracy

#### Other issues

If you encounter issues with AI vulnerability guidance:

1. Check that you have appropriate [permissions](https://helm.docs.medcrypt.com/manage-vulnerabilities/broken-reference) to view vulnerabilities.
2. Contact support with specific examples of unexpected behavior.

The AI guidance system continuously learns and improves based on user feedback and new vulnerability intelligence.