Flawfinder is a program that examines C source code and reports possible security weaknesses (``flaws'') sorted by risk level. It's very useful for quickly finding and removing some security problems before a program is widely released.
Features
- Easy to use
- Easy to install
- Reports on a number of different types of vulnerabilities
- CWE compatible
- Earned CII Best Practices badge
- No cost
- Open source software with OSI-approved license
- Works even if you can't build the software
Categories
QA AutomationLicense
GNU General Public License version 2.0 (GPLv2)Follow Flawfinder
Other Useful Business Software
Get Avast Free Antivirus with 24/7 AI-powered online scam detection
Award-winning antivirus protection, as well as protection against online scams, dangerous Wi-Fi connections, hacked accounts, and ransomware. It includes Avast Assistant, your built-in AI partner, which gives you help with suspicious online messages, offers, and more.
Rate This Project
Login To Rate This Project
User Reviews
-
Flawfinder gives you a quick first-look at where issues in C/C++ code may be lurking. Its ease of use, friendly development team, and range of detected software weaknesses make it the best value for a quick static analysis scan.