Our hybrid approach to code reviews blends automated tools with human intelligence. We use proprietary scripts that can be customized and extended for each application.
The benefits of the hybrid approach include:
- Zero false positives as human intelligence is used to verify each finding
- Very high efficiency as automated scripts are used to zoom into suspicious code
- Ability to detect business logic security flaws, including custom backdoors
- Customize the scripts specifically for the programming styles used
- Greater coverage by using automated scripts to analyze the entire code base