AppScan® Source for Analysis overview

AppScan® Source for Analysis is a tool for analyzing code and providing specific information about source code vulnerabilities in critical systems. AppScan® Source for Analysis lets you centrally manage your software risk across multiple applications, or even your entire portfolio. You can scan source code, triage, and eliminate vulnerabilities before they become a liability to your organization.

AppScan® Source for Analysis provides audit and quality assurance teams with tools to scan source code, triage results, and submit flaws to defect tracking systems.

Armed with in-context intelligence from the AppScan® Source Security Knowledgebase, analysts, auditors, managers, and developers can:

• Scan selected source code on-demand to locate critical vulnerabilities
• Receive precise remediation advice and invoke their preferred development environment and code editor directly from analysis
• Trace tainted data through a precise, interactive call graph from input to output
• Enforce coding policies, verifying approved input validation and encoding routines through AppScan® Source trace
• Learn and implement secure programming best practices during software development