Results for "taint analysis"

A Rails-aware static analyzer that models controllers, routes and views to find injection, mass assignment and unsafe redirect flaws in Ruby code.

An enterprise SAST engine with broad language coverage that builds a queryable code graph and traces tainted data from source to sink.

A long-established enterprise static analyzer with very broad language support, rule-driven taint analysis and detailed compliance reporting.

A semantic code analysis engine that turns a codebase into a queryable database and finds vulnerabilities with declarative security queries.

Static analyzer for PHP combining type inference with an opt in taint mode that traces untrusted input to dangerous sinks.

Pattern matching static analysis engine whose rules are written as code snippets with metavariables, with an optional commercial platform for triage.

Self hosted analysis server that scans repositories for quality and security issues, enforces quality gates and tracks findings over time.