$ man bearer

Bearer

Static analysis that follows sensitive data through your code.

fix at sourcepassive / local onlyvia awesome-security

## why a developer should care

Finds OWASP Top 10 issues in source code and shows where personal data flows - into logs, third-party APIs, or unencrypted storage.

## install

Other platforms and pre-built binaries: official install guide ↗

Check it worked: open a new terminal and run bearer version. "command not found" means it isn't installed or isn't on your PATH yet.

## shortcuts

## helps with

• A01 Broken Access Control
• A04 Cryptographic Failures
• A05 Injection
• A08 Software or Data Integrity Failures

→ official docs · ← all tools