Puma Scan Community

Security analyzers for C# that performs static code analysis for vulnerabilities identified in the OWASP Top 10, SANS/CWE Top 25, and other common insecure coding patterns.

Supports Visual Studio 2022 (17.8+) and Visual Studio 2026. Build-time analysis is available via the Puma.Security.Rules.2022 NuGet package.

Analysis Categories

• Insecure Configuration
• SQL Injection
• LDAP Injection
• Path Tampering
• Weak Password Configuration
• Unvalidated Redirects
• Cross-Site Scripting
• Cross-Site Request Forgery
• Weak Input Validation
• Insecure Cryptography
• Deserialization Vulnerabilities
• Missing Access Control

See the git repository for more details: https://github.com/pumasecurity/puma-scan

Start Scanning

https://github.com/pumasecurity/puma-scan/wiki

Building Custom Rules

Contributing to the Puma Scan Community Edition

Release Notes

https://github.com/pumasecurity/puma-scan/releases

Issues or Questions

For tracking purposes, Q & A has been disabled for this extension. GitHub is the central repository for tracking questions and issues. Please read the wiki and review the existing GitHub issues before opening new GitHub issues for questions and support.