I need to perform a security code review on a huge Swift application. I have done many mobile penetration tests before and some code review but never on iOS Swift Apps. I am primarily looking for information and reference material which will help me answer the two questions:

  1. Could you provide information on how to conduct a source code reviews of Swift and Swift code for security flaws.

  2. What would be a good approach for automating the source code review using either static or dymanic analysis of the source code?

  • 5
    The problem is that such questions (both: asking for product recommendations and for references to outside materials) are off-topic here. – techraf Jul 7 '16 at 9:14

I encourage you try out https://www.kiuwan.com It has out of the box custom rules for Swift, it allows for custom rule creation and has scored the highest benchmark on Owasp for SAST vendors. Disclaimer: I work there

A quick google search brought me to Tailor I have never used it though. Also Hp Fortify and Checkmarx can help scan your code but do involve huge upfront cost.

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.