Examine software code to identify any security flaws
A secure code review is a specialized task involving manual and/or automated review of an application's source code in an attempt to identify security-related weaknesses (flaws) in the code. A secure code review does not attempt to identify every issue in the code, but instead looks to provide insight into what types of problems exist and to help the developers of the application understand what classes of issues are present. The goal is to arm the developers with information to help them make the application's source code more sound and secure.
Examines software code to identify any security flaws that could be exploited by attackers. A hybrid approach is used to achieve results
Client Outcomes/Benefits
Increase software quality and lower risk associated to a software release. If executer early in the development lifecycle, will lower the cost of security testing executed just prior to release