Vulnerability Analysis

Every vulnerability you miss is a vulnerability an attacker can find. Systematic analysis traces untrusted data from source to sink, evaluates filters for bypass, and questions every trust boundary assumption.

When to Apply

Apply this analysis when:

• Reviewing any code for security vulnerabilities
• Auditing authentication, authorization, or session logic
• Evaluating input handling and output encoding
• Assessing cryptographic implementations
• Reviewing file operations, command execution, or deserialization
• Checking for race conditions in concurrent code
• Analyzing dependency security and supply chain risks
• Hardening web APIs, reverse proxies, or infrastructure code

Core Methodology

Taint Analysis: Mark untrusted data at its origin (source) and track propagation to dangerous operations (sink). Assess whether adequate sanitization exists along each path.