#Imuscle app wikipedia software#
#Imuscle app wikipedia code#

#Imuscle app wikipedia code#

Note: It does not take the place of a security code review or security static analyzer but in a fast paced and highly automated driven development world, this is an important addition to your toolset. While other tools play an important role in automating detection of vulnerabilities and poor security or other coding practices, Application Inspector helps to answer the question what is in it? Application Inspector is judgement free, focusing instead on helping inform security and other scenarios by surfacing details that might otherwise go unnoticed. It also supports JSON and TEXT output format options for piping into a database for additional search and reporting options.Īdditionally, it includes a confidence indicator (and filter) as well as the ability to drill down to the code file area where the match was found. those that contain multiple languages in the same directory or sub-directories for well-known identifying features.īy default Application Inspector generates a browser based report for visually illustrating the detected features with a drill down capability to review the code section, a project summary reporting languages used and other meta-data. A Quick LookĪpplication Inspector will scan projects with supported languages including projects with mixed languages i.e. Our tool includes hundreds of default identifying patterns for detecting general features like frameworks used, file I/O, OS API's as well as the ability to detect key security and privacy features of a component.

#Imuscle app wikipedia software#

Knowing what is in your software is the first step to making key choices about what actions are appropriate before allowing it to be deployed in your own or to customer environments. Application Inspector can help identify interesting characteristics of an application by examining source code saving significant time over performing this manually. Modern applications rely heavily on software written outside of your company which comes with risks. a string padding library only does what it says. This enables developer and security professionals to validate purported component objectives e.g.

OverviewĪpplication Inspector's primary objective is to identify source code features in a systematic and scalable way not found elsewhere in typical static analyzers. It was previously presented for the first time at SecTor 2019. The first project general release (1.0) was on 12/16/19.

Welcome to the Application Inspector Wiki!