A tool used to query for vulnerabilities based off of common rules about program behavior.