Secure code review is a method of security testing that analyzes an application's source code to find vulnerabilities without executing the program. This comprehensive analysis is performed using static analysis tools that apply predefined rules to detect potential vulnerabilities.

By not executing the code, Static Application Security Testing (SAST), or static analysis, analyzes source code to find security vulnerabilities that make your organization’s applications susceptible to attack. SAST scans an application before the code is compiled and is also known as white box testing. It can be integrated into the early stages of the development lifecycle, providing developers with immediate feedback on the security posture of their code.