AppScreener is a comprehensive static application security testing (SAST) tool developed by Solar Security. It analyzes source code and binary executables across 36 programming languages to identify security vulnerabilities, backdoors, and undocumented features. Utilizing proprietary Fuzzy Logic Engine technology, AppScreener minimizes false positives while detecting issues such as SQL injection, cross-site scripting (XSS), and hardcoded credentials. The platform offers unique binary static analysis capabilities, including code reconstruction from executables like mobile apps from Google Play and App Store links. It also provides software composition analysis (SCA) for third-party dependencies, integrates with CI/CD pipelines and issue tracking systems like Jira, and delivers flexible reporting aligned with standards such as PCI-DSS, OWASP, HIPAA, and CWE. This enables security teams and developers to strengthen application security throughout the software development lifecycle.
Key Features and Functionality:
- Comprehensive Code Analysis: AppScreener performs thorough analysis of application source code, bytecode, or binaries to detect security vulnerabilities, including common issues like SQL injection, cross-site scripting (XSS), and buffer overflows.
- Multi-Language Support: It supports a wide range of programming languages and platforms, making it suitable for diverse development environments. This includes languages such as Java, C#, C++, PHP, Python, and many others.
- Detailed Reporting: The tool generates detailed reports highlighting identified vulnerabilities, their severity, and recommendations for remediation. These reports help developers understand and address security issues effectively.
- Integration Capabilities: AppScreener can integrate with various development tools and continuous integration/continuous deployment (CI/CD) pipelines. This allows for automated security testing as part of the development workflow, promoting early detection and resolution of security issues.
Primary Value and User Solutions:
AppScreener enhances software security by identifying vulnerabilities and undocumented features in applications, supporting 36 programming languages and various executable file formats. It provides detailed vulnerability reports and recommendations for fixes, integrating with common development tools and platforms like Git, Jenkins, SonarQube, and Jira. This facilitates its incorporation into Secure Software Development Lifecycles (SDLC), making it particularly useful for analyzing legacy and custom software. By automating security testing and providing comprehensive analysis, AppScreener helps developers and security teams improve the security posture of their applications efficiently.
