Offensive 360 Secure Code Analysis

Offensive 360 is a Static Application Security Testing (SAST) company that originated in 2017 as a university research project by security researchers. The company developed a unique methodology using virtual compilers for each programming language to enable Data Flow Graph (DFG) analysis, allowing the platform to interpret source code semantically rather than processing it as textual data.

The platform provides an integrated solution that combines multiple security functions including source code analysis, malware detection, Software Composition Analysis (SCA), open-source library inspection, and license checks. The service operates on a single subscription model without imposing limits on lines of code or number of scans.

Offensive 360 offers both on-premises and cloud deployment options. The on-premises version comes pre-installed in a customized kernel requiring no installation, designed to be portable for consultants who need to perform code reviews at customer sites. The on-premises version can operate without internet connectivity, addressing source code privacy concerns. The cloud version provides end-to-end encryption and security.

The company reports analyzing over 245 billion lines of code with an average scanning duration of under 27 minutes for 1 million lines of code and maintains a false positive rate below 1%. The platform is designed to enable organizations to secure their source code without budget constraints related to project volume or code size.