# ElectroNG, our premium SAST tool released!

DevFeed: [ElectroNG, our premium SAST tool released!](<https://devfeed.tech/articles/electrong-our-premium-sast-tool-released-92016.md>)

Original publisher: [Read original article](<https://blog.doyensec.com/2022/09/06/electrong-launch.html>)

Published: 2022-09-05T22:00:00Z

Content type: release

Language: en

Sources: [Doyensec](<https://devfeed.tech/sources/doyensec.md>)

Topics: [Electron](<https://devfeed.tech/topics/electron.md>), [Tool](<https://devfeed.tech/topics/tool.md>)

Tags: [2017](<https://devfeed.tech/tags/2017.md>), [2019](<https://devfeed.tech/tags/2019.md>), [2020](<https://devfeed.tech/tags/2020.md>), [2021](<https://devfeed.tech/tags/2021.md>), [announce](<https://devfeed.tech/tags/announce.md>), [application](<https://devfeed.tech/tags/application.md>), [application-security](<https://devfeed.tech/tags/application-security.md>), [applications](<https://devfeed.tech/tags/applications.md>), [apps](<https://devfeed.tech/tags/apps.md>), [auditing](<https://devfeed.tech/tags/auditing.md>), [automation](<https://devfeed.tech/tags/automation.md>), [based](<https://devfeed.tech/tags/based.md>), [best](<https://devfeed.tech/tags/best.md>), [best-practices](<https://devfeed.tech/tags/best-practices.md>), [betting](<https://devfeed.tech/tags/betting.md>), [blackhat](<https://devfeed.tech/tags/blackhat.md>), [blog](<https://devfeed.tech/tags/blog.md>), [blog-post](<https://devfeed.tech/tags/blog-post.md>), [box](<https://devfeed.tech/tags/box.md>), [doyensec](<https://devfeed.tech/tags/doyensec.md>), [doyensecurity](<https://devfeed.tech/tags/doyensecurity.md>), [exploit](<https://devfeed.tech/tags/exploit.md>), [hacking](<https://devfeed.tech/tags/hacking.md>), [infosec](<https://devfeed.tech/tags/infosec.md>), [offensive](<https://devfeed.tech/tags/offensive.md>), [pentest](<https://devfeed.tech/tags/pentest.md>), [pentester](<https://devfeed.tech/tags/pentester.md>), [reverse-engineering](<https://devfeed.tech/tags/reverse-engineering.md>), [sast](<https://devfeed.tech/tags/sast.md>), [security](<https://devfeed.tech/tags/security.md>), [tool](<https://devfeed.tech/tags/tool.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

## AI overview

ElectroNG is Doyensec's paid desktop SAST scanner for Electron applications, developed as a major refresh of its Electronegativity OSS scripts. It offers more than 50 checks, improved HTML/JavaScript/TypeScript parsing and heuristics intended to reduce false positives, and checks that adjust findings based on the Electron version detected. The article illustrates why version matters: the `affinity` setting's behavior can affect renderer isolation and was deprecated in Electron v14. ElectroNG costs $688 per user per year; one individual may use it across unlimited projects, scans, and installations on their own machines. Electronegativity OSS will continue to be supported and coexist with the paid product.

## Source excerpt

As promised in November 2021 at Hack In The Box #CyberWeek event in Abu Dhabi, we're excited to announce that ElectroNG is now available for purchase at https://get-electrong.com/. Our premium SAST tool for Electron applications is the result of many years of applied R&D! Doyensec has been the leader in Electron security since being the first security company to publish a comprehensive security overview of the Electron framework during BlackHat USA 2017. Since then, we have reported dozens of vulnerabilities in the framework itself and popular Electron-based applications. A bit of history We launched Electronegativity OSS at the beginning of 2019 as a set of scripts to aid the manual auditing of Electron apps. Since then, we've released numerous updates, educated developers on security best practices, and grown a strong community around Electron application security. Electronegativity is even mentioned in the official security documentation of the framework. At the same time, Electron has established itself as the framework of choice for developing multi-OS desktop applications. It is now used by over a thousand public desktop applications and many more internal tools and custom utilities. Major tech companies are betting on this technology by devoting significant resources to it, and it is now evident that Electron is here to stay. What's new? Considering the evolution of the framework and emerging threats, we had quickly realized that Electronegativity was in need of a significant refresh, in terms of detection and features, to be able to help modern companies in "building with security". At the end of 2020, we sat down to create a project roadmap and created a development team to work on what is now ElectroNG. In this blog post, we will highlight some of the major improvements over the OSS version. There is much more under the hood, and we will be covering more features in future posts and presentations. User Interface If you've ever used Electronegativity, it wo