System, method, and process for continuously identifying material changes and calculating risk for applications and infrastructure

A system for risk assessment of an application or infrastructure, comprising:

• Code Intelligence Analyzers that scan historic code commits in code repositories of the application or infrastructure as well as real-time code commits;
• a Developer Behavior Profiler builds a behavior profile for each developer of the application, based, at least on said historic and real-time code commits and relevant issues in Issue Tracking Systems;
• and
• a Spacetime Graph, being a multidimensional graph detailing a current state of the application or infrastructure and a history of said code commits of the application or infrastructure, as determined by said Code Intelligence Analyzers and said Developer Behavior Profiler, wherein said spacetime graph is multidimensional and includes at least:
• (a) a Contextual Code Patterns dimension, including insights as to patterns, commonalities and similarities within said repository and between said repository and other repositories resulting from AI or Machine Learning analysis of said code commits and assembly of a control-flow graph for at least said code repository,
• (b) a Security and Compliance Controls dimension, including contextually identified security and compliance controls,
• (c) a Developer Behavior Analysis dimension, including said behavior profiles of said developers, and
• (d) a Material Changes dimension including changes that might affect the application or infrastructure.