Progpilot
A static application security testing (SAST) tool for PHP that detects vulnerabilities like XSS through taint analysis.
What is Progpilot?
Progpilot is a static application security testing (SAST) tool specifically built for PHP. It analyzes source code to identify security vulnerabilities, such as cross-site scripting (XSS), by performing taint analysis to trace untrusted data flows. The tool helps developers detect and mitigate security risks early in the development lifecycle.
PHP developers and security engineers who need to integrate security scanning into their CI/CD pipelines or local development workflows. It's also suitable for teams maintaining legacy PHP applications requiring ongoing security assessments.
Progpilot offers a lightweight, customizable alternative to commercial SAST tools, with the flexibility to define application-specific security rules. Its open-source nature and multiple deployment options make it accessible for both individual developers and enterprise teams.
Overview
A static analysis tool for security
Use Cases
Best For
- Scanning PHP applications for XSS vulnerabilities during development
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
