Home

Welcome to the SecuCheck Documentation!

SecuCheck is a tool for static detection of taint-style vulnerabilities. The tool runs within the user's integrated development environment (IDE). It is implemented as a MagpieBridge server and supports multiple IDEs, such as Eclipse, Visual Studio Code, IntelliJ Idea, etc.

The vulnerabilities are specified in a Java internal domain-specific language named fluentTQL.

About fluentTQL DSL

Build Secucheck locally

Installation Guides

• Eclipse
• IntelliJ IDEA

Tutorials

• Write your first fluentTQL specification
• How to use the SecuCheck configuration page?

Note: These projects are not yet deployed. Links will be updated soon its deployed.