# Code Reviews

{% embed url="https://www.amanhardikar.com/mindmaps/CodeReview.html" %}

<figure><img src="https://1889614651-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MYLrtG_g25xt3AUhomb%2Fuploads%2FNpKpdER4lwNS5zND5RR6%2Fimage.png?alt=media&#x26;token=a12a9bc9-1b22-4271-a50b-2f8ca33ec0d1" alt=""><figcaption></figcaption></figure>

<table data-full-width="true"><thead><tr><th width="288">URLs</th><th></th></tr></thead><tbody><tr><td>CERT Coding Standards</td><td><a href="https://www.securecoding.cert.org/">https://www.securecoding.cert.org</a></td></tr><tr><td>OWASP Code Review Guide</td><td><a href="https://www.owasp.org/index.php/Category:OWASP_Code_Review_Project">https://www.owasp.org/index.php/Category:OWASP_Code_Review_Project</a></td></tr><tr><td>Agnitio</td><td><a href="http://sourceforge.net/projects/agnitiotool/">http://sourceforge.net/projects/agnitiotool/</a></td></tr><tr><td>CERT Rosecheckers</td><td><a href="http://sourceforge.net/projects/rosecheckers/">http://sourceforge.net/projects/rosecheckers/</a></td></tr><tr><td>Yasca</td><td><a href="http://scovetta.github.io/yasca/">http://scovetta.github.io/yasca/</a></td></tr><tr><td>VCG</td><td><a href="http://sourceforge.net/projects/visualcodegrepp/">http://sourceforge.net/projects/visualcodegrepp/</a></td></tr><tr><td>phpcs-security-audit</td><td><a href="https://github.com/FloeDesignTechnologies/phpcs-security-audit">https://github.com/FloeDesignTechnologies/phpcs-security-audit</a></td></tr><tr><td>RIPS</td><td><a href="http://sourceforge.net/projects/rips-scanner/">http://sourceforge.net/projects/rips-scanner/</a></td></tr><tr><td>Flawfinder</td><td><a href="http://www.dwheeler.com/flawfinder/">http://www.dwheeler.com/flawfinder/</a></td></tr><tr><td>Dawn</td><td><a href="https://github.com/thesp0nge/dawnscanner">https://github.com/thesp0nge/dawnscanner</a></td></tr><tr><td>Brakeman</td><td><a href="http://brakemanscanner.org/">http://brakemanscanner.org/</a></td></tr></tbody></table>
