Following untrusted data through a database
A profile field can be stored safely with a parameterized SQL query
Code Intelligence
How tools understand code: static analysis, data flow, security, and the techniques that help us navigate and reason about software.
What is the best static analysis tool for your use case?
DataFlowBench ranks eight static analyzers for CI, editors, security review, and low-noise workflows, including licensing trade-offs.
The Taint Analysis Power Ranking
Eight analyzers, thirteen languages, and not one clean sweep
Reliable agentic code
Building a JavaScript Reference Graph With an Agent
At Brokk we build tools that make LLMs more effective by providing