static code analyzer

{
  "id": "MLC-T-CYB-004081",
  "term": "static code analyzer",
  "field": "Cybersecurity",
  "definition": "A tool that analyzes source code without executing the code. Static code analyzers are designed to review bodies of source code (at the programming language level) or compiled code (at the machine language level) to identify poor coding practices. Static code analyzers provide feedback to developers during the code development phase on security flaws that might be introduced into code.",
  "references": [
    "NISTIR 8011 Vol. 4",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/static-code-analyzer/"
}