Glossary: Vulnerability Management and Monitoring

static analysis

Also written: static code analysis, automated review

Reviewing code without running it, usually with a tool such as Bandit that flags known bad patterns. It is fast and consistent but gives false positives and misses logic flaws.