wSAST Code Analyzer

Flexible static code analysis framework for consultants and developers.


wSAST can be downloaded here. The current version is wSAST v0.1-alpha (release date 18-12-2023). Review changes here.


To activate wSAST during alpha just make sure that the alpha key 11111-11111-11111-11111-11111 is stored within the file in the same directory as wSAST.exe.
Alternatively run the command wSAST.exe activate --activation-id=11111-11111-11111-11111-11111 to activate manually.

First Use

To get started with wSAST just point it at some source code for one of the supported languages. For example wSAST.exe interactive --sources=c:\path\to\source --project=firstproject and follow the prompts.

After the source has been processed, run help to view commands and associated syntax.


To update wSAST just run under the interactive mode; if there are updates available it will prompt you to install them. Update URLs from the wSAST API are signed and contain the SHA-256 hash of the update file, which is verified after download.


To remove wSAST just delete all associated files; it does not store files (other than project files) anywhere outside of the directory containing the executable. Please note that if you delete the wsast_license.key file you may need to reactivate it if you change your mind.

I hope you enjoy using wSAST and find it helpful!

Dataflow Analysis

Explorer the Dataflow Analyzer which forms the core capability of wSAST.

Learn more

Static Analysis

Learn more about the Static Analysis capabilities.

Learn more

Code Graphing

Discover the powerful code graphing capabilities which can aid you in code exploration.

Learn more

Code Searching

See how code searching can help you quickly determine possible paths to exploitation.

Learn more