Supported Technologies

The technologies Noir supports: programming languages, frameworks, and API specifications.

What Noir can analyze:

  • Languages and Frameworks: The programming languages and web frameworks Noir extracts endpoints and parameters from.
  • Specifications: API and data specification formats Noir can parse, such as OpenAPI (Swagger), RAML, and HAR.
  • Callee Coverage: Frameworks that emit best-effort 1-hop handler callees for AI SAST and code review.
  • AI Context: Per-endpoint guards, sinks, validators, and signals, aggregated into an AI-review-ready context object with --ai-context.
  • Mobile Apps: How Noir extracts Android and iOS deep-link entry points (custom schemes, intents, universal links) and links them to the handling code.
  • CLI Apps: How Noir maps the command-line attack surface (subcommands, flags, positional arguments, consumed environment variables) across 21 languages.