Patent attributes
Technologies are described herein for an analysis tool for data security. An analysis tool can be configured to analyze data using a dynamic analysis and a static analysis. During the dynamic analysis, test execution paths can be executed against the data to track dynamic flows corresponding to execution paths through the data and to track variable values for variables referenced during the dynamic analysis. During the static analysis, possible program execution paths can be identified. The dynamic flows can be mapped to the static flows and a taint status of the variables associated with the mapped dynamic flows can be evaluated. Based upon the taint status, the analysis tool can identify potentially unsafe static flows.