The product datasheet calls out the following "critical checks": API usage errors, best practice coding errors, buffer overflows, build system issues, class hierarchy inconsistencies, code maintainability issues, concurrent data access violations, control flow issues, cross-site request forgery (CSRF), cross-site scripting (XSS), deadlocks, error handling issues, hard-coded credentials, incorrect expression, insecure data handling, integer handling issues, integer overflows, memory?corruptions, memory?illegal accesses, null pointer dereferences, path manipulation, performance inefficiencies, program hangs, race conditions, resource leaks, rule violations, security best practices violations, security misconfigurations, SQL injection, uninitialized members