Download
Flawfinder is a program that examines C source code and reports possible security weaknesses (``flaws'') sorted by risk level. It's very useful for quickly finding and removing some security problems before a program is widely released.
Features
- Easy to use
- Easy to install
- Reports on a number of different types of vulnerabilities
- CWE compatible
- Earned CII Best Practices badge
- No cost
- Open source software with OSI-approved license
- Works even if you can't build the software
Project Samples
Categories
QA AutomationLicense
GNU General Public License version 2.0 (GPLv2)Follow Flawfinder
Other Useful Business Software
Gen AI apps are built with MongoDB Atlas
MongoDB Atlas is the developer-friendly database used to build, scale, and run gen AI and LLM-powered apps—without needing a separate vector database. Atlas offers built-in vector search, global availability across 115+ regions, and flexible document modeling. Start building AI apps faster, all in one place.
Rate This Project
Login To Rate This Project
User Reviews
-
Flawfinder gives you a quick first-look at where issues in C/C++ code may be lurking. Its ease of use, friendly development team, and range of detected software weaknesses make it the best value for a quick static analysis scan.