System Documentation

Technical specifications for the E-ComGuard SAST Multi-Engine.

Orchestration Architecture

E-ComGuard utilizes a distributed Go-based orchestrator that dispatches PHP-AST analysis workers. Each worker runs in a hardened sandbox to prevent cross-contamination of codebases.

$ sast-cli deploy --repo=target-repo --cms=woocommerce

Static Analysis Heuristics

Our engine goes beyond simple regex. We perform full data-flow analysis to track untrusted input from sinks to sources, identifying:

  • Blind SQL Injection (Boolean & Time-Based)
  • Insecure Object Deserialization
  • Cross-Site Scripting (XSS) in Template Literals
  • Remote Code Execution (RCE) via `eval` and `preg_replace` /e