Articles
Notes on Hyrax
Tryhyraxnow: what it is and how to start free
What this site is, what Hyrax does, and the one-click route to starting free.
ReadTryhyraxnow and hyrax.dev: same product, one entry point
Same company, same product. What each site is for and where your account actually lives.
ReadWhat is Hyrax?
The independent review layer for AI coding, and what it does once a repo is connected.
ReadWhat the Hyrax free plan includes
The mini audit, five findings, and five fixes monthly. What the free plan covers and where it ends.
ReadHow Hyrax reviews and fixes code
The audit, the fix as a pull request, and the review on every commit.
ReadAutonomous Code Governance
8 articles- What is a Code Fix?4 min
- What is Agentic AI in Software Development?6 min
- What is Agentic Code Review?5 min
- What is Automated Code Remediation?5 min
- What is Autonomous Code Governance?8 min
- What is Autonomous Code Remediation?6 min
- What is a Code Governance Policy?5 min
- What is Proactive Code Security?5 min
Static Analysis & Scanning
14 articles- SAST vs DAST: What's the Difference?5 min
- What is a Linter?4 min
- What is an Abstract Syntax Tree (AST)?5 min
- What is DAST (Dynamic Application Security Testing)?5 min
- What is Dynamic Analysis?5 min
- What is Fuzzing?5 min
- What is Hybrid Code Analysis?4 min
- What is IAST (Interactive Application Security Testing)?4 min
- What is Reachability Analysis?4 min
- What is SARIF?4 min
- What is SAST (Static Application Security Testing)?5 min
- What is SCA (Software Composition Analysis)?5 min
- What is Static Code Analysis?5 min
- What is Taint Analysis?5 min
Code Quality
14 articles- Code Coverage vs Test Coverage: What's the Difference?4 min
- What are Coding Standards?4 min
- What is Clean Code?5 min
- What is Code Complexity?5 min
- What is Code Coverage?5 min
- What is Code Documentation?4 min
- What is Code Quality?5 min
- What is Code Refactoring?5 min
- What is a Code Smell?4 min
- What is Continuous Quality?5 min
- What is Cyclomatic Complexity?5 min
- What is Software Rot?4 min
- What is Technical Debt?5 min
- What is Test Coverage?4 min
Code Review
8 articlesSecurity Fundamentals
10 articles- What is a Code Security Audit?2 min
- What is a Security Vulnerability?2 min
- What is Application Security?2 min
- What is Application Security Testing?2 min
- What is DevSecOps?2 min
- What is Secure Coding?2 min
- What is Secure SDLC?2 min
- What is Shift Left Security?2 min
- What is Software Security?2 min
- What is the SDLC?2 min
Vulnerabilities
18 articles- What is a Supply Chain Attack?5 min
- What is Broken Access Control?5 min
- What is Broken Authentication?5 min
- What is a Buffer Overflow?5 min
- What is Command Injection?4 min
- What is Cross-Site Request Forgery (CSRF)?4 min
- What is Dependency Confusion?4 min
- What is Hardcoded Secrets?5 min
- What is Insecure Deserialization?5 min
- What is Malicious Code?5 min
- What is the OWASP Top 10?5 min
- What is Path Traversal?4 min
- What is Prototype Pollution?5 min
- What is Security Misconfiguration?5 min
- What is SQL Injection?5 min
- What is Server-Side Request Forgery (SSRF)?5 min
- What is Cross-Site Scripting (XSS)?5 min
- What is XXE Injection?4 min
Security Standards
6 articlesSecurity Practices
8 articlesCI/CD & DevOps
10 articlesTesting
10 articles- What is Behavior-Driven Development (BDD)?4 min
- What is End-to-End Testing?4 min
- What is Integration Testing?4 min
- What is Penetration Testing?5 min
- What is Performance Testing?4 min
- What is Regression Testing?4 min
- What is Smoke Testing?4 min
- What is Test-Driven Development (TDD)?4 min
- What is Unit Testing?4 min
- White-Box vs Black-Box Testing: What's the Difference?5 min
Dev Practices
8 articlesLanguage Guides
10 articles- C/C++ Static Code Analysis: A Developer's Guide5 min
- C# Static Code Analysis: A Developer's Guide5 min
- Go Static Code Analysis: A Developer's Guide5 min
- Java Static Code Analysis: A Developer's Guide5 min
- JavaScript Static Code Analysis: A Developer's Guide5 min
- PHP Static Code Analysis: A Developer's Guide5 min
- Python Static Code Analysis: A Developer's Guide5 min
- Ruby Static Code Analysis: A Developer's Guide4 min
- Rust Static Code Analysis: A Developer's Guide5 min
- TypeScript Static Code Analysis: A Developer's Guide5 min
Analysis Quality
4 articlesAI in Engineering
8 articlesComparisons
14 articles- AI Code Review vs Manual Code Review5 min
- Code Review vs Code Audit4 min
- Code Review vs Static Analysis4 min
- Continuous Integration vs Continuous Delivery4 min
- DAST vs Penetration Testing4 min
- Linting vs Static Analysis: What's the Difference?4 min
- Manual vs Automated Code Review4 min
- Open Source vs Proprietary Code Scanners4 min
- Reactive vs Proactive Code Security4 min
- SAST vs IAST: What's the Difference?4 min
- SAST vs SCA: What's the Difference?4 min
- Shift Left vs Shift Right Security4 min
- Static Analysis vs Dynamic Analysis4 min
- Unit Testing vs Integration Testing4 min