Microsoft Application Inspector

When to Use Application Inspector

Ideal scenarios:

• Technology stack profiling and discovery
• Identifying security-relevant code patterns (authentication, cryptography, logging)
• Pre-audit reconnaissance to understand codebase capabilities
• Detecting use of sensitive APIs and security controls
• Creating software composition reports
• Finding data handling patterns (PII, credentials, encryption)

Complements other tools:

• Use before Semgrep/CodeQL for context on what security patterns exist
• Combine with SARIF Issue Reporter for detailed findings analysis
• Use alongside SCA tools to understand both dependencies and implementation