Description

Puma Scan is a .NET software secure code analysis tool providing real time, continuous source code analysis as development teams write code. In Visual Studio, vulnerabilities are immediately displayed in the development environment as spell check and compiler warnings, preventing security bugs from entering your applications. Puma Scan also integrates into the build to provide security analysis at compile time.

Supported Environments

Puma Scan supports Visual Studio 2022 (17.8+) and Visual Studio 2026 via a single extension, and ships as a single NuGet package (Puma.Security.Rules.2022) for build-time analysis with the .NET SDK.

Documentation

The Puma Scan Community Edition install instructions and documentation can be found on the GitHub Wiki.

Building Your Own Rules

Interested in building your own rules and contributing back to the security community? Read our blog on Building Your Own Security Analyzer.

License Agreement

The Puma Scan Community Edition is licensed under the Mozilla Public License (MPL) version 2.0.

Contributing

Contributions are welcome. Fork and send us a pull request!

Contributors

• Eric Johnson - Principal Security Engineer, Puma Security
• Eric Mead - Principal Security Engineer, Puma Security
• Andrew Guggenberger - Senior Security Engineer
• Greg Pakes