false-positive-rate

Evaluate a Security Scanner in Three Weeks, Not Six Months

A standard bake-off measures detection on code both tools have seen, weights forty rows equally, and tests week one of a week-fifty problem. Six questions with real variance, and how to run them against your incumbent too.