StorM Lance
Web security. It reads code, reproduces attacks in isolation and checks that a fix holds.
What it covers
- Code and configuration
- Reads JavaScript, TypeScript, Python and HTML, and a site's configuration, for weaknesses. Submitted code is read, never run.
- Live sites
- Checks a running site only inside a scope you authorize: exact addresses, a bounded number of read-only requests, no redirects followed.
- Isolated test setup
- Attacks are reproduced only here, never against outside targets.
- Retest
- After a fix, the same attack runs again and the two results are compared.
- Packages
- Checks the packages in a project's npm lock file against published advisories.
- Protection layer
- Servers that run StorM Web Engine inspect incoming requests and outgoing responses.
Security work
If you run web software and want it checked, tell us what you run and which risks concern you.