AppCodeScan Enterprise Audit Edition is powerful product to scan application code for security defects and vulnerabilities. It can be integrated in SDLC as part of the process to make critical checks. Manual source code assessment can take a long time but AppCodeScan can help in reducing time drastically by easy interface with smart bundled rules. Entire rule engine is flexible and it is possible to add rules by end user on the fly to make process much more efficient. It has simple tracing utility to verify and track vulnerabilities. Simple HTML reporting can be converted to PDF along with mitigation options.

»Quick scanning and discovery on large source base
»Detecting critical vulnerabilities in source with its root cause
»Easy to walk in the source and manipulating traces
»Helps in detecting entry points and attack surface
»Web 2.0 applications analysis - Ajax, RIA and Web Services
»Detecting SQL Injection, XSS, Logical bugs and many more
»Supporting .NET, Java, PHP, ASP, JavaScript, Flash etc.
»Rules can be created on the fly and integrated in the process
»Support for new rules and updates as needed
»Reports can be used for PCI-DSS and compliances