Providing cloud-based software that helps identify security vulnerabilities by analyzing data flows from user inputs, such as APIs, to vulnerable code or open-source dependencies through advanced code analysis techniques; providing online non-downloadable software for assessing security risks in applications by analyzing code to identify vulnerabilities, potential attack paths, and exploitable weaknesses; providing software services that analyze data flows within an application to uncover security threats and help organizations prioritize remediation efforts; creating security software that detects and visualizes potential attack paths from user inputs to vulnerable parts of the application