A curated list of tools, articles, books, and any other resource related to Secure Code Review

Please, note this is a bilingual repository, so not all the content is made in english. In front of the content, the language of the content will be indicate under brackets.

• Articles
• Learn
• Talks
• Tools
• License

• A Comprehensive Guide to Secure Code Review [EN]
• How to conduct a secure code review [EN]
• Secure Code Review Best Practices [cheat sheet included] [EN]
• The developer's guite to a secure code review [EN]
• What Is Secure Code Review? Process, Tools, and Best Practices [EN]

• Documentação de desenvolvimento seguro - Microsoft [Free]
• SecureFlag [Pay - Owasp Member]

• How to conduct a basic security code review | Vickie Li [EN]
• In code review we trust! Finding security bugs | Helena Carreço [PT/BR]
• How to Analyze Code for Vulnerabilities | Vickie Li [EN]

• Checkmarx [Pay]
• Horus [OpenSource]
• Safety [OpenSource]
• Semgrep [Pay]
• ShiftLeft Scan [OpenSource]
• Snyk [Pay]
• Veracode [Pay]