The safeguards map / 1.1 Code and dependencies
OWASP Noir
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
A static analysis tool that reads source code and lists the endpoints an application exposes, with parameters and source files, for reviewers and DAST tools.
Where it sits
1.1 Code and dependencies (primary): Reads source code and extracts the endpoints an application exposes, including undocumented routes, as an inventory with parameters and source files.
Noir bridges the gap between SAST and DAST by analyzing source code to generate accurate, authenticated endpoint inventories.
captured
Noir is a SAST tool that reads source code and extracts the endpoints an application exposes
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who make it
- Runs
- by handin CI
Handoffs
produces Software and AI inventory: JSON, YAML, OpenAPI, SARIF, cURL, Postman, HTML
Listed, not drawn: it only keeps an inventory.
Collector's note
Inventory only. The docs present the endpoint list as the output, feeding human reviewers, AI reviewers and DAST tools; it changes nothing in the application.
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.