Introduction

The Meterian SASHA scanner is a static code analyser for code that, using pattern matching and semantic grep, detects security problems in your codebases.

It integrates with multiple open source scanners in order to provide wide range of support for multiple languages.

It provides standard SARIF support for multiple languages.

SASHA is currently in beta but it can be enabled to customers upon a request to support.

At the moment the scanner has been validated against these languages/ecosystems:

• .NET (C#)

• NodeJS

Please note that the scanner can support all other languages as well, but support for these has not been validated yet.