All Questions
Tagged with code-review tools
6 questions
5
votes
3
answers
2k
views
Secure source code review tool for jQuery
Does anyone know any secure source code review tool for jQuery/jQueryUI. I've looked around a bit but couldn't find anything. Its too good if it is opensource.
- 2,334
17
votes
4
answers
3k
views
Criteria for Evaluating Static Analysis Tools
As with any tools purchase part of the outcome is in how good the evaluation criteria are, so it is important to understand the criteria people might use when assessing Security static analysis tools.
...
- 62.6k
6
votes
6
answers
3k
views
What are some good, free tools to run automated security audits for PHP code?
I've been looking for some time now and have come up short. The most promising I found was Spike PHP, which seems to no longer work. I'm looking to scan my code for potential risks of SQL Injection, ...
- 161
11
votes
3
answers
6k
views
Can anyone suggest good open source tools for scanning source code for vulnerabilities? [closed]
I'm particularly looking ones which detect vulnerabilities in C/C++ code. I've seen a bunch of proprietary tools but no open source ones.
- 1,204
8
votes
6
answers
8k
views
Fortify360 - Sinks & Sources - Vulnerability count
In an application security environment, I use Fortify Software's Fortify360 on a daily basis.
One of my biggest hurdles is explaining the numbers (sources vs sinks)
Fortify flags each location in ...
- 2,006
8
votes
4
answers
1k
views
Benefits of secure code review in-IDE vs. fatapp vs. webapp
For those of you who have worked with commercial secure code review tools such as:
Klocwork
Coverity
Armorize
Fortify
Checkmarx
Appscan Source Edition (formerly
Ounce)
Or perhaps a free or open-...
- 19.1k