Limits of deterministic code scanning

Sonar moves the pen tester's access-control checklist into the build pipeline

Sonar's Hunter Agent goes after broken access control, business-logic and session-management flaws that the company says used to need manual testing. It reports through CI/CD, where gates have only held rule matches.