TechoSolara: Security testing.

General.
Security testing performed.
Results.

General.

Why are we publishing these?

TechoSolara is a smart solar viability assessment tool for Android. Transparency is important to us, so we are sharing the details of our security testing and the results we have achieved.

The tests performed.

SAST - Static Application Security Testing.

To quote Google's AI Search:

SAST is a white-box testing method that analyzes source code, bytecode, or binaries for security vulnerabilities without executing the program, often called "static code analysis". Integrated into CI/CD pipelines, it identifies flaws like SQL injection or memory issues early in development.

Our tooling is opengrep.

SCA - Software Composition Analysis, aka dependency testing.

To quote Google's AI Search:

SCA is an automated cybersecurity process that scans, identifies, and manages open-source and third-party components within an application's codebase. It maps out dependencies to detect known vulnerabilities, licensing risks, and outdated components, ensuring security and compliance throughout the software supply chain.

Our tooling is Dependency Checker from NIST - AKA OWASP tooling.

Our results.

In the interest of completeness, there are also our Quality Assurance pages.

Back to page top.