Offensive Security
What is Secure Code Review?
Secure code review is the systematic examination of application source code, using manual analysis and automated tools, to find security flaws before software is deployed. It matters because catching vulnerabilities such as injection or broken access control early in development is far cheaper and safer than fixing them in production.
Example
A reviewer identifies a database query that concatenates user input directly, flags it as a SQL injection risk, and recommends parameterized queries.
Reference: OWASP ↗
Related Clear Infosec services
Related terms
Have a question about secure code review in your environment? Talk to our team.