Is there a (preferably static) Taint analysis tool for PHP, which can visualize the result (e.g. as a call graph) in an output format suitable for a CI environment? (e.g. html) It would be good if you could define your own sinks too.

Your Answer


Browse other questions tagged or ask your own question.