Introduction to and concepts of some security tools
In this section, we will discover more about the security tools that cover the preceding security checks. These security tools are picked up based on the features and provide free trials, as well as being open source. So, these tools are great for beginners or for learning purposes. We will be unpacking different types of tools from different vendors so that you get to know more about them.
Snyk – Security advisory for source code vulnerabilities in real time
Snyk Code is a tool developed by Snyk Limited that offers a free plan. Snyk Code comes as a plugin for an IDE. It scans the static code as well as performing SAST at the IDE level. This plugin connects with an online database and gives results in real time. Snyk Code provides three types of checks:
- Open source security
- Code scan security
- Code quality checks
We will be covering the installation and implementation of this plugin in a later section...