Problem
We've examined several types of tools that can be used to improve the quality of your software and detect and remediate security vulnerabilities during the SDL for your work product. There's no one-size-fits-all approach to these tools, and there are pros and cons of each method (and within each method, the various tools that can be applied).
In this discussion, present some strengths and weaknesses of each testing/analysis category. When do you think is the best time within the development process to apply analysis tools?
Pick a programming language and make an argument why a particular commercial or open-source tool would be a good choice for security testing an application developed in that language. Limit your response to three paragraphs at most. Provide a reference to the tool, and demonstrate or at a minimum describe its functionality.