Sourceclear(Veracode)

2020-12-24
572

By using control flow analysis, the SourceClear scanner can tell if the function in an open source component containing a vulnerability is actually being called by your first-party code.

Remediation work, in some cases by up to 90 percent.