When is this useful?
Some weaknesses are easier to understand by examining code in context. This service supports teams developing an application, preparing a change or investigating a recurring flaw. The review focuses on selected components and use cases, in collaboration with people able to change the software.
Reporting to plan
- Code areas to investigate or correct
- An explanation of the risk and its conditions
- Remediation options to discuss with developers
Scope, timeline and deliverables are agreed before work begins.
Frequently asked questions
Is source access required?
Yes for a source code review. Repositories, versions and permissions must be agreed, as must information retention rules.
Does a review replace application testing?
No. Code review and testing a running application provide complementary perspectives. Their combination depends on the need.