Welcome to the Bearer documentation. Bearer is a static application security testing (SAST) tool that scans your source code and analyzes your data flows to discover, filter and prioritize security risks and vulnerabilities leading to sensitive data exposures (PII, PHI, PD). We provides built-in rules against a common set of security risks and vulnerabilities, known as OWASP Top 10. Leakage of sensitive data through cookies, internal loggers, third-party logging services, and into analytics environments. Usage of weak encryption libraries or misusage of encryption algorithms. Unencrypted incoming and outgoing communication (HTTP, FTP, SMTP) of sensitive information. Non-filtered user input. Hard-coded secrets and tokens. Bearer currently supports JavaScript and Ruby stacks, more will follow. Bearer's scanners and reports are your path to analyzing security risks and vulnerabilities in your application.
Features
- Non-filtered user input
- Hard-coded secrets and tokens
- Unencrypted incoming and outgoing communication (HTTP, FTP, SMTP) of sensitive information
- Usage of weak encryption libraries or misusage of encryption algorithms
- Leakage of sensitive data through cookies, internal loggers, third-party logging services, and into analytics environments
- Bearer currently supports JavaScript and Ruby stacks
Project Samples
