Microsoft has released the Microsoft Application Inspector, a cross-platform open-source command-line ... doesn't remove the need for security code review or a security static analyzer.