Contributed a review of OpenText Core Application Security: It enforces source-code scanning and finding vulnerabilities in source code. It would be nice if it could manage the false positives better.