Overview

Noir bridges SAST and DAST by analyzing source code to discover endpoints—including shadow APIs, deprecated routes, and hidden paths that other tools miss.

Using source code as the single source of truth, Noir delivers comprehensive attack surface data that integrates with DAST tools, eliminating blind spots in your DevSecOps pipeline.

Key Capabilities

• Attack Surface Discovery: Identifies complete attack surface including hidden endpoints and shadow APIs
• AI-Powered Analysis: Uses LLMs to detect endpoints in unsupported languages and frameworks
• SAST-to-DAST Bridge: Provides discovered endpoints to DAST tools for comprehensive security scans
• DevSecOps Ready: Integrates with CI/CD pipelines and tools like ZAP, Burp Suite, and Caido
• Multi-Format Output: Exports in JSON, YAML, OpenAPI, and other formats

GitHub | OWASP Project Page

How It Works

Noir is built with Crystal and uses these components:

• Detectors: Identify technologies in the codebase
• Analyzers: Parse code to find endpoints and parameters
• LLM Analyzer: Discover endpoints using AI for unsupported frameworks
• Passive Scanner & Tagger: Identify vulnerabilities and add contextual tags
• Deliver: Send results to external tools
• Output Builder: Generate reports in multiple formats

 flowchart LR
    SourceCode:::highlight --> Detectors

    subgraph Detectors
        direction LR
        Detector1 & Detector2 & Detector3 --> |Condition| PassiveScan
    end

    PassiveScan --> |Results| BaseOptimizer

    Detectors --> |Techs| Analyzers

    subgraph Analyzers
        direction LR
        CodeAnalyzers & FileAnalyzer & LLMAnalyzer
        CodeAnalyzers --> |Condition| Minilexer
        CodeAnalyzers --> |Condition| Miniparser
    end
   subgraph Optimizer
       direction LR
       BaseOptimizer[Optimizer] --> LLMOptimizer[LLM Optimizer]
       LLMOptimizer[LLM Optimizer] --> OptimizedResult
       OptimizedResult[Result]
   end

    Analyzers --> |Condition| Deliver
    Analyzers --> |Condition| Tagger
    Deliver --> 3rdParty
    BaseOptimizer --> OptimizedResult
    OptimizedResult --> OutputBuilder
    Tagger --> |Tags| BaseOptimizer
    Analyzers --> |Endpoints| BaseOptimizer
    OutputBuilder --> Report:::highlight

    classDef highlight fill:#000,stroke:#333,stroke-width:4px;

Project Goals

Bridge static code analysis and dynamic security testing by providing comprehensive endpoint discovery—including hidden and undocumented endpoints—enabling more effective DAST scans.

Future plans include expanding language support, improving analysis accuracy, and enhancing AI capabilities.

Contributing

Noir is open-source and welcomes contributions. See our Contributing Guide for details.

Contributors

Thank you to everyone who has contributed to Noir! ♥️

Code of Conduct

Review our Code of Conduct on GitHub.

Help and Feedback

Questions or feedback? Use GitHub discussions or issues.