OWASP Find Security Bugs

Description Find Security Bugs is a SpotBugs plugin for security audits of Java web applications and Android applications. It can detect 128 different vulnerability types including Command Injection, XPath Injection, SQL/HQL Injection, XXE and Cryptography weaknesses. SpotBugs is a static analysis tool that targets Java but also works with Groovy, Scala and Kotlin projects. Licensing This software is released under LGPL. Roadmap Theses are the current priorities: Release a new version every few months. Improve the quality of the static analysis detectors Continue working on finding new vulnerabilities ideas and implementing detectors if there is an opportunity. Improving the documentation for new contributors. Getting Involved Involvement in the development and promotion of Find Security Bugs is actively encouraged! You can contribute by : Suggesting idea for new detectors that are not already cover. Coding new detectors or modifying exist ones. See Good first issue on Github to get started Reviewing the descriptions of the different vulnerabilities, the website or this page. About PROJECT INFO What does this OWASP project offer you? RELEASE(S) INFO What releases are available for this project? what is this project? Name: Find Security Bugs Purpose: Static Code Analyzer for Java applications License: LGPLv3 who is working on this project? Project Leader(s): Philippe Arteau how can you learn more? Project Pamphlet: View Project Presentation: Mailing list: N/A Project Roadmap: Not Yet Created Key Contacts Contact Philippe Arteau to contribute to this project Contact Philippe Arteau to review or sponsor this project current release Not Yet Published last reviewed release Not Yet Reviewed other releases

Project Resources Website GitHub page Release notes Project Leader Philippe Arteau Related Projects SpotBugs Classifications