---

스크린샷

---

세부

---

---

SiteShadow 주요 특징

• Rule Library
  There is a big set of rules (over 2,000) to catch different security problems.
• CI Integration
  SiteShadow offers a GitHub Action to check code safety automatically during development.
• Taint Tracking
  SiteShadow traces data as it moves through code to find security problems like SQL injection and XSS.
• Auto-Fix Features
  It can fix security issues automatically in your code editor.
• Code Understanding
  It uses a method called AST to understand your code structure and identify vulnerabilities.
• Data Flow Analysis
  SiteShadow follows how data flows across different parts of your program, even between functions.
• Evidence Inspection
  Users can check detailed proof of what issues are found or fixed before taking action.
• Proof-backed Results
  Coverage and safety evidence are shown to prove what vulnerabilities are found or fixed.
• Sanitizer Recognition
  It recognizes safe code patterns like parseInt(), html.escape(), and DOMPurify.sanitize().
• Reduced False Positives
  The tool recognizes common safe patterns like sanitizers to avoid false alarms.
• Interprocedural Analysis
  SiteShadow tracks data flow across multiple functions for better detection.
• Detection Credibility Matrix
  The tool shows how reliable its detection is for different types of vulnerabilities.
• Support for Multiple Languages
  It works with many programming languages like Python, JavaScript, Java, C#, and Go.
• Coverage of Vulnerability Types
  It detects many types of security issues such as SQL injection, XSS, command injection, and SSRF.

---

배지

---

SiteShadow 대안

---

사용된 기술

모든 기술 보기