BetterScan

One CLI. Two engines. One deduplicated security report.
On the OWASP Benchmark, BetterScan found 1,407 of 1,415 real bugs.

Download Source on GitLab

How it works

OpenGrep is the fast pass over known bad patterns in many languages. Fraunhofer CPG is the deep pass: it models how the program runs and how data flows, and BetterScan applies OWASP Top 10, CWE and privacy rules on top. Results are merged, deduplicated and exported as JSON, SARIF or HTML.

Install

macOS, Linux and WSL:

curl -fsSL https://gitlab.com/we-the-best-code/betterscan/-/raw/main/install.sh | sh

Download binaries

Latest release archives (checksums):

Quick scan

betterscan --code-dir . --install-missing
betterscan --code-dir . --json-out results.json --sarif-out results.sarif --html-out results.html