How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.
The main features of mobsf/mobsfscan are: Static Analysis.
Projects with overlapping indexed features include: ajinabraham/nodejsscan — nodejsscan is a static analysis security tool and vulnerability detection engine designed to scan Node.js source code… bearer/bearer — Bearer is a static analysis security testing tool and privacy compliance auditor. It identifies security… david-a-wheeler/flawfinder — This is "flawfinder" by David A. Wheeler. designsecurity/progpilot — A static analysis tool for security. find-sec-bugs/find-sec-bugs — The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin,… ajinabraham/libsast — Generic SAST Library.
nodejsscan is a static analysis security tool and vulnerability detection engine designed to scan Node.js source code for security flaws and common coding vulnerabilities. It functions as a static application security testing tool that analyzes code without executing the program. The tool operates as a security linter that can be integrated into continuous integration pipelines to block insecure code from merging into main branches. It automates the auditing process through rule-based detection and pattern-based static analysis. The project provides capabilities for vulnerability alert autom
Bearer is a static analysis security testing tool and privacy compliance auditor. It identifies security vulnerabilities, hard-coded secrets, and privacy risks in source code through static analysis and data flow tracing. The tool distinguishes itself by tracking the movement of sensitive data through code to identify leaks and by mapping personal and health-related information flows to generate evidence for privacy impact assessments. It also provides differential scanning for pull requests and uses fingerprint-based suppression to exclude known false positives from reports. The platform co
