ARCHERY ITSoftware Security Analysis
Source and compiled code analysis for vulnerabilities, malware and weaknesses.
Using the Archery IT Code Scanner, we analyse source code and compiled applications for vulnerabilities, malware, spyware, insecure configuration and risky third-party dependencies before deployment, then deliver executive and technical reports. The platform has been used in the security analysis of software developed for military aerospace applications.
Who it’s for
- Software developers and vendors
- Government and defence suppliers
- Financial institutions
- Healthcare organisations and vendors
What we examine
- Static source code
- Compiled applications
- Embedded code
- Third-party dependencies
How an engagement works
Intake
Code is received through a secure channel and the scope agreed.
Scanning
Automated analysis with the Code Scanner, including batch scanning.
Review
Findings are reviewed and risk-scored.
Reporting
Executive and technical reports.
What you need
- Rights to have the code analysed
- Build artefacts or source code for the agreed scope
What you receive
- Executive report
- Technical findings report
- Risk scoring
Limitations. Automated analysis identifies known patterns and weaknesses; it does not replace secure design or guarantee the absence of vulnerabilities.