DerSecur Information

DerScanner is a comprehensive application security tool by DerSecur that combines static (SAST), dynamic (DAST) and software composition (SCA) code security testing. Its capabilities allow for effective detection of vulnerabilities and backdoors, highlighting them in the source code of the analyzed application. DerScanner is a unique tool that is able to analyze both source and binary code, is the world leader in the number of supported programming languages (36 languages) that can also understand polyglot applications and significantly reduces false positives with own Fuzzy Logic Engine patented technology. DerScanner has algorithms for the automatic search for undocumented features. These algorithms are based on our own permanently updated knowledge base. Undocumented features are detected by their basic structures, such as hard-coded accounts, hidden network activity, time bombs, etc. The presence of such basic structures may point to a more complex backdoor in the app. The binary code deobfuscation and decompilation functionality of DerScanner enable the detection of vulnerabilities and undocumented features in legacy and custom apps, including those interacting with third-party components used to reduce development time (such as freeware, pre-written codes from Internet, modules, and libraries). DerScanner can compare the results of completed checks and generate various diagrams to vividly show how vulnerabilities or undocumented features are emerging and eliminated, including breakdown by project group. In addition, the system takes into account typical code writing changes, while also monitoring vulnerabilities or undocumented feature