PCIDSS.COM - PCI DSS Security Solutions Directory

Yasca is a source code analysis tool. It could best be described as a “glorified grep script” plus an aggregator of other open-source tools. Yasca is designed to be very flexible and easy to extend. In fact, writing a new rule is as easy as coming up with a regular expression, the file extensions it applies to, and the name of your new rule.