Flawfinder is a program that examines C source code and reports possible security weaknesses (``flaws'') sorted by risk level. It's very useful for quickly finding and removing some security problems before a program is widely released.
Features
- Easy to use
- Easy to install
- Reports on a number of different types of vulnerabilities
- CWE compatible
- Earned CII Best Practices badge
- No cost
- Open source software with OSI-approved license
- Works even if you can't build the software
Categories
QA AutomationLicense
GNU General Public License version 2.0 (GPLv2)Follow Flawfinder
Other Useful Business Software
Our Free Plans just got better! | Auth0
You asked, we delivered! Auth0 is excited to expand our Free and Paid plans to include more options so you can focus on building, deploying, and scaling applications without having to worry about your security. Auth0 now, thank yourself later.
Rate This Project
Login To Rate This Project
User Reviews
-
Flawfinder gives you a quick first-look at where issues in C/C++ code may be lurking. Its ease of use, friendly development team, and range of detected software weaknesses make it the best value for a quick static analysis scan.