(websites), while SAST technology is used for the scanning of the application source code.

DefenseCode ThunderScan – Source Code Security Scanner is a static analysis suite for comprehensive security auditing of application source code. It can be used during and after the development of desktop, web, and mobile applications, supporting major programming languages (platforms) including C#, Java, PHP, Python, Ruby, JavaScript, Node.js, VB.Net, Classic ASP, Visual Basic, VBScript, PL/SQL, C/C++, ColdFusion, TypeScript, Groovy, Java for Android, and iOS Objective-C. ThunderScan can be deployed on-premises (with easy integration into the CI/CD pipeline) or in the cloud. ThunderScan SAST can be used as a Windows desktop application, as a server based REST API, or as a web oriented Web User Interface application directly from an internet browser.

DefenseCode Web Security Scanner is a dynamic analysis suite for extensive security auditing of active web applications (websites), regardless of the development platform and applied web technologies, even when the application source code is no longer available.

DefenseCode ThunderScan and DefenseCode Web Scanner are designed and developed to exceed the highest industry standards of threat detection. The products are fast, effective, and very easy to use, requiring almost no user input.

DefenseCode has in-depth expertise in penetration testing, zero-day vulnerability research, security auditing, and source code security analysis. Consultancy services are offered on demand.