Skip to content

Glossary: Endpoint and Application Security

Static code analysis

Also written: static analysis, SAST

Finding risky patterns in source code without running it. It is fast and covers every line, but expect false positives and missed logic flaws.

Where the book teaches it

Related terms

BanditSemgrep