Draft:DerScanner


DerScanner
DeveloperDerSecur Ltd.
TypeApplication security testing
LicenseProprietary
Websitederscanner.com

DerScanner is a proprietary application security testing (AST) platform developed by DerSecur Ltd. Independent coverage describes the platform as combining static and dynamic analysis and correlating results to reduce false positives.[1] DerScanner is also listed in community directories of source code analysis tools.[2]

History

[edit]

Third-party announcements and coverage describe DerSecur as founded in 2011 and DerScanner as the company’s flagship application security testing platform.[3]

In 2023, Embarcadero Technologies described DerScanner as a technology partner tool used in the context of static analysis for Delphi applications.[4] LearnDelphi also referred to DerSecur/DerScanner as an Embarcadero Technology Partner in 2024.[5]

In 2024, regional technology media reported that TechBridge partnered with DerSecur to bring DerScanner to the Middle East and Africa market.[6]

In Japan, Toyo Corporation announced it had signed a domestic agency agreement with DerSecur and started offering DerScanner in November 2024.[7]

In 2025, Singapore Management University (SMU) announced an educational partnership involving DerSecur and the DerScanner platform for student training.[8]

Capabilities

[edit]

Help Net Security described DerScanner 3.12 as adding correlation between SAST and DAST results to reduce false positives.[1] OWASP’s directory entry describes DerScanner as suitable for restricted or air-gapped environments and as combining multiple testing approaches in one platform.[2] Toyo Corporation’s announcement described DerScanner as a comprehensive testing platform supporting multiple security tests and AI-assisted reduction of false positives.[7]

Supported languages

[edit]

Toyo Corporation’s announcement stated that DerScanner supports 43 programming languages.[7] Embarcadero’s partner communication referenced DerScanner’s analysis of Delphi code in the context of Delphi static analysis.[4]

Standards and classification

[edit]

DerScanner appears in MITRE’s CWE Compatibility Program materials, including a published questionnaire entry and compatibility listings.[9][10]

Reception

[edit]

In 2023, SecurityBrief reported that DerScanner was recognized as a “High Performer” in G2’s Winter 2024 reporting for software analysis categories, attributing the recognition to user feedback on the G2 marketplace.[11] The CTO Club included DerScanner in a 2025 overview of static code analysis tools.[12]

See also

[edit]

References

[edit]
  1. ^ a b "DerSecur updates DerScanner to help users reduce false positives". Help Net Security. 16 December 2022. Retrieved 2025-12-17.
  2. ^ a b "Source Code Analysis Tools". OWASP. Retrieved 2025-12-17.
  3. ^ "Dersecur Ltd. ニュース一覧 (Maker page)". Toyo Corporation. Retrieved 2025-12-17.
  4. ^ a b "How secure is your app? Static analysis finds security holes". Embarcadero Blog. 28 August 2023. Retrieved 2025-12-17.
  5. ^ "How to Effectively Secure Your App from Exploitation, Data Breaching, and Hacking". LearnDelphi.org. 18 April 2024. Retrieved 2025-12-17.
  6. ^ "TechBridge Partners with DerSecur to bring DerScanner to the MEA market". TahawulTech. 10 July 2024. Retrieved 2025-12-17.
  7. ^ a b c "アプリケーションセキュリティ・テストプラットフォーム「DerScanner」販売開始 (press release PDF)" (PDF). Toyo Corporation. 14 November 2024. Retrieved 2025-12-17.
  8. ^ "SMU Partners with Leading Cybersecurity Provider to Boost Students' Skills in Combating Cyber Threats". Singapore Management University. 8 October 2025. Retrieved 2025-12-17.
  9. ^ "CWE-Compatible Questionnaire #83". MITRE CWE. Retrieved 2025-12-17.
  10. ^ "CWE-Compatible Products and Services". MITRE CWE. Retrieved 2025-12-17.
  11. ^ "DerScanner honoured as high performer by G2 in software analysis". SecurityBrief New Zealand. 27 December 2023. Retrieved 2025-12-17.
  12. ^ "25 Best Static Code Analysis Tools Of 2025". The CTO Club. Retrieved 2025-12-17.
[edit]