Code
Static Code Analysis (SAST)
Static Code Analysis (SAST) reads source code without running it. It looks for security flaws like SQL injection and cross-site scripting so they can be fixed early.
What it is
SAST stands for Static Application Security Testing. It inspects the code as written, line by line, rather than testing a running application. The goal is to catch security bugs during development, before they reach production.
Key capabilities
- Scans source code for common vulnerability patterns.
- Detects SQL injection risks.
- Detects cross-site scripting (XSS) risks.
- Flags issues before code ships to production.
- Points developers to the exact location of each finding.
Who it’s for
It fits development teams who want to find security problems early. It helps engineers fix issues in their own code before review or release. It suits any team that writes and maintains application code.