Global web icon
sans.org
https://www.sans.org/tools
Cyber Security Tools - SANS Institute
Interested in developing a training plan to fit your organization’s needs?
Global web icon
owasp.org
https://owasp.org/www-community/Source_Code_Analys…
Source Code Analysis Tools - OWASP Foundation
Source code analysis tools, also known as Static Application Security Testing (SAST) Tools, can help analyze source code or compiled versions of code to help find security flaws. SAST tools can be added into your IDE. Such tools can help you detect issues during software development.
Global web icon
nist.gov
https://www.nist.gov/itl/ssd/software-quality-grou…
Source Code Security Analyzers | NIST
A Source Code Security Analysis Tool Functional Specification is available. Byte Code Scanners and Binary Code Scanners have similarities, but work at lower levels.
Global web icon
github.com
https://github.com/resources/articles/what-is-code…
What is Code Scanning? - GitHub
Code scanning is a powerful tool that helps developers identify vulnerabilities, improve code quality, and streamline development processes. Code scanning is an automated process that analyzes source code to identify potential security vulnerabilities, bugs, and adherence to coding standards.
Global web icon
wiz.io
https://www.wiz.io/academy/application-security/op…
The Top 28 Open-Source Code Security Tools: A 2026 Guide
Discover the top open-source security tools for cloud security. This guide covers the pros and cons and explains how a scanner fits into your security stack.
Global web icon
sans.org
https://www.sans.org/for-organizations/workforce/r…
Secure Your Code at the Source - SANS Institute
Turn theory into practice with hands-on developer security training that shows teams how to find, fix, and prevent vulnerabilities in real code.
Global web icon
securetackles.com
https://securetackles.com/source-code-review/
Source Code Review – Securetackles
Source Code Review is a critical part of the software development lifecycle, where security experts analyze an application’s source code to identify vulnerabilities, coding flaws, and potential security weaknesses.
Global web icon
snyk.io
https://snyk.io/articles/code-review/code-scanning…
Code Scanning Explained: Tools And Best Practices | Snyk
Learn how code scanning works, why it’s essential to software supply chain security, which tools to use, and how to follow code scanning best practices.
Global web icon
veracode.com
https://www.veracode.com/security/code-analysis
Source Code Analysis Solutions | Veracode
Our Veracode cloud-based static analysis tool scans compiled code, also called binary code or bytecode, without needing to access the underlying source code. In non-open-source projects, attempting to access the source of compiled code can raise licensing or copyright concerns.
Global web icon
github.com
https://github.com/ossf/cve-bin-tool
GitHub - ossf/cve-bin-tool: The CVE Binary Tool helps you determine if ...
The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others),...