Application Inspector
Developer(s) | Positive Technologies |
---|---|
Engine | |
Operating system | Windows |
Type | static code analysis |
License | Proprietary |
Website | www.ptsecurity.com/ww-en/products/ai/ |
Search Application Inspector on Amazon.
Application Inspector is a source code analysis tool developed by Positive Technologies. The tool combines dynamic code analysis and static code analysis based on Abstract interpretation.[1]. It enables security specialists and software engineers to detect source code and application configuration flaws, find and verify security vulnerabilities in source code written in Java (including JSP and JSF),C#, VB.Net, ASP.NET, PHP, JavaScript, Objective-C, Swift, C\C++, SQL (PL/SQL. T-SQL. MySQL), HTML5, Python and Go.
Application Inspector is available in two different versions: Desktop Edition and Enterprise Edition. Desktop Edition was designed for code audit and a single user, while Enterprise Edition is for secure development and multi-user access.
History[edit]
Application Inspector was released in the end 2014. First product Desktop Edition supported Abstract interpretation and exploit generation to confirm vulnerabilities during SAST analysis for Java, C #, PHP.
Since 2018 Application Inspector is supporting C\C++ and languages used in mobile applications.
Since 2018 Application Inspector started featuring in Gartner Magic Quadrant for Application Security Testing[2].
In 2019 Application Inspector Enterprise Edition was launched. It started supporting integration with CI/CD tools, a role-based access control model, and teamwork capabilities with unlimited number of users[3]
Applications[edit]
- Application Inspector is one of the tools featured in the Open Web Application Security Project (OWASP) source code analysis tools list[4]
- It is also featured on the National Institute of Standards and Technology list of Source Code Security Analyzers[5]
See also[edit]
List of tools for static code analysis
References[edit]
- ↑ "Analyzing source code for vulnerabilities: SAST theory, practice, and prospects". 2016-07-08.
- ↑ "Magic Quadrant for Application Security Testing".
- ↑ "Positive Technologies launches PT Application Inspector Enterprise to create secure web applications". www.ptsecurity.com. Retrieved 2019-08-30.
- ↑ "Source Code Analysis Tools - OWASP".
- ↑ "Source Code Security Analyzers - SAMATE".
This article "Application Inspector" is from Wikipedia. The list of its authors can be seen in its historical and/or the page Edithistory:Application Inspector. Articles copied from Draft Namespace on Wikipedia could be seen on the Draft Namespace of Wikipedia and not main one.