CodeSheriff.NET

CodeSheriff.NET is an open-source scanner for ASP.NET Core websites that, we believe, is the most accurate scanner on the market. Disagree? Tell us what the scanner missed and we'll fix it!

About CodeSheriff.NET

Bullseye

Unparalleled Accuracy

CodeSheriff.NET is the only scanner (that we know of) that is written by C# security experts for C# products. This results in accuracy that is unmatched in the industry.

Quiet

Reduced Noise

Too many false positives from your existing scanner? CodeSheriff"s unique design allows you to reduce the noise and focus on what matters most.

Open Books

Open Source

CodeSheriff is open source! It's also free to use for consultants and non-security companies. (Licenses are required for resale or packaging in other products.) Please check out the project on GitHub.

Further Reading

Learn about the benefits and challenges of SAST (Static Application Security Testing), or automated source code analysis.

You can implement CSRF protections correctly and still be vulnerable. Read this to learn why and what you can do about it.

Want to learn more?

Start a Conversation