AppSec Solutions has updated its static code analysis tool, AppSec.Wave, to support the 1C programming language. This enhancement allows businesses to identify security vulnerabilities in software built on the Russian platform, which is widely used in fintech, government, and real estate development.
Unlike basic pattern-matching tools that often produce false positives, AppSec.Wave utilizes taint analysis. The engine constructs a call tree within modules, tracking data flow from untrusted sources to potentially dangerous operations. It provides detailed reports, including specific file paths and line numbers for each identified risk.
The tool previously added support for languages such as JavaScript, Python, Go, C++, Java, PHP, Ruby, and C#. The integration of 1C aims to secure critical infrastructure systems that handle sensitive financial, personnel, and inventory data.
In addition to 1C support, AppSec.Wave has been integrated with an MCP server to facilitate interaction with AI-driven development environments like Claude Code and Cursor. This enables automated vulnerability scanning during the early stages of software development.
AppSec Solutions has also expanded the capabilities of its AppSec.Track tool. This component is designed to scan open-source dependencies, helping developers detect non-existent or malicious third-party packages within their projects.
