Glossary: Vulnerability Management and Monitoring

Bandit

Also written: bandit

A free static analysis tool for Python code. On the contractor's code it flagged a hardcoded password (CWE-259) and a possible SQL injection (CWE-89), giving a severity and a confidence for each.

Where the book teaches it

Chapter 1: Finding and Ranking Vulnerabilities

Related terms

static analysis CWE confidence hardcoded secret SQL injection