Connect a repository
BattleTest reviews code changes for security issues and puts findings beside the affected code. Start by installing the GitHub App. Choose the repositories it can access, then open a pull request as usual.
PR Review
PRODUCT WALKTHROUGH · 1:17
PR Review
Follow a code change from repository access to a security finding and a proposed correction.
Chapters
Read the transcript
Review the change
In this example, Alex adds an invoice endpoint to the Wonderland billing application. The endpoint requires a signed-in user. But its database lookup checks only the invoice ID. It does not check which account owns that invoice.
Read the finding
BattleTest flags the missing account check in a review comment. The comment explains the problem: a user who obtains another account's invoice ID could retrieve that invoice. The engineer can read the affected code and the security explanation together, inside the pull request.
Review the proposed correction
The proposed correction checks both the invoice ID and the signed-in user's account. An engineer still reviews and applies the change. The suggestion is part of the review, not an automatic merge. Code review checks the implementation. To investigate how the running application behaves, use BattleTest's live application testing.
See how it fits your team.
Explore the product or book a conversation about your deployment.