Software and its code commonly contains errors. Some of these bugs are not critical and might affect only the functionality of the application, while others might affect security. In other cases, application code might initially appear secure, but a vulnerability could be discovered that makes it exploitable by attackers. Identifying and fixing these potentially exploitable security vulnerabilities, a process known as vulnerability management, is critical to application security.
A code scanner is a tool used to identify potential security issues in software applications. Various code scanning techniques can be used to identify vulnerabilities in applications before they go into production, and also to scan applications already running in production environments. The earlier code scanning is introduced into the development process, the lower the risk of deploying security vulnerabilities to production, and the lower the cost and complexity of remediating them.