DownloadFlawfinder is a program that examines C source code and reports possible security weaknesses (``flaws'') sorted by risk level. It's very useful for quickly finding and removing some security problems before a program is widely released.
Features
- Easy to use
- Easy to install
- Reports on a number of different types of vulnerabilities
- CWE compatible
- Earned CII Best Practices badge
- No cost
- Open source software with OSI-approved license
- Works even if you can't build the software
Project Samples
Categories
QA AutomationLicense
GNU General Public License version 2.0 (GPLv2)Follow Flawfinder
You Might Also Like
Manage your enterprise’s compensation lifecycle and accurately recognize top performers with a digitized, integrated system. Keep employees invested and your HR team in control while preventing compensation chaos.
Rate This Project
Login To Rate This Project
User Reviews
-
Flawfinder gives you a quick first-look at where issues in C/C++ code may be lurking. Its ease of use, friendly development team, and range of detected software weaknesses make it the best value for a quick static analysis scan.