In a recent blog post, Microsoft announced an open source tool that developers can use to detect security vulnerabilities in their solutions. The tool is called Microsoft Application Inspector and is available on GitHub. As organizations try to reduce their time to market, oversights may occur due to the complexity of software and the use of open-source components that have not been thoroughly vetted. Application Inspector can be used to identify malicious code or back doors used in custom code solutions.
