Code Audits

Yon Consulting provides specialized code audits for Java and SQL code. The audits are focused on detection of issues in the following areas: security, performance, database, scalability and high-availability. In case of problems with a certain piece of Java or SQL code or simply a need for verification, we offer several code audits:

  • security audit to discover security vulnerabilities with a focus on web-related issues, authentication/authorization and confidentiality.
  • performance audit to detect performance bottlenecks on both the code and design level with a focus on call and data flows, algorithms, communication, proper and efficient usage of frameworks and libraries,
  • database audit to analyze transaction management, efficiency of queries, correctness and efficiency of database schema and usage of database-related frameworks and libraries (specifically JPA, hibernate, JDBC, iBatis), 
  • scalability and high-availability audit to assess the design and code of an application in the context of scalability and HA practices.

Each audit ends with a detailed report that lists all the issues found in software along with recommendation how to deal with them.

During our audits we perform a thorough code review. A manual code review is supported by a set of automated analyses like: a deep static analysis of code, a dynamic analysis and profiling of an application and its runtime enviroment. For automated analyses we apply the state-of-the-art tools. Among others, we use a prototype version of our in-depth detailed static analysis along with anti-pattern queries that assist in identification of performance bottlenecks, security vulnerabilities, code defects and bad practices.