> For the complete documentation index, see [llms.txt](https://bugbounty-for-starters.humbertojunior.com.br/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://bugbounty-for-starters.humbertojunior.com.br/so-where-do-i-start/code-review-and-sast.md).

# Code Review and SAST

1. OWASP Code Review Project: The OWASP Code Review Project provides a comprehensive guide to code review, including best practices, methodologies, and tools.
2. Secure Code Warrior: Secure Code Warrior is an online platform that provides training and assessment on secure coding practices, including code review and SAST.
3. SANS Institute: The SANS Institute offers several courses on software security, including code review and SAST, taught by experienced security professionals.
4. Udemy: Udemy is an online learning platform that offers a variety of courses on software security, including code review and SAST.
5. Coursera: Coursera is another online learning platform that offers courses on software security, including code review and SAST.
6. Pluralsight: Pluralsight is an online learning platform that offers courses on software security, including code review and SAST.
7. Code Review Checklist: The Code Review Checklist is a comprehensive list of items to consider when reviewing code for security vulnerabilities, including best practices and guidelines for SAST.