Code Review Services

The world of software has become very competitive and you need to be sure about every line of code that you write and be certain that it will run on all latest browsers. Third party code review will unearth the reasons for memory leaks and poor performance and will let your developers progress forward in the project.

Some of the symptoms of poor code quality are

• The application is unreliable and crashes consistently for no apparent reason
• Significant testing efforts required
• Longer regression cycles
• Poor performance – application runs slower than expected hence decreasing usability
• Components of code becoming too dependent on the programmers who created them
• Unexplained memory leakage
• Security holes

If you are facing similar issues, e-Zest could be your right code review partner. e-Zest offers code review services throughout the project’s lifecycle for ensuring better quality code for your products and solutions that enhance maintainability, performance, security and scalability by ensuring timely, regular and consistent code review practices throughout product/application development lifecycle.
Typical processes followed by e-Zest as part of independent code review services can be described as follows

• Assessment planning –e-Zest meets the key members of client’s development team to gain an understanding of the application’s functionality, design, and architecture and to obtain access to the source code
• Source code scanning – This involves complete or partial review of codebase to identify technical vulnerabilities in all areas of the application. This process normally requires significant fine-tuning and configuration in order to reduce false positives and provide you with actionable results
• Manual source code review – The source code for critical features of the application is reviewed manually, with a focus on areas that typically carry the most risk – for example, source code impacting application security items such as authentication, authorization, session management and payment processing code
• Report preparation – e-Zest takes the results of both the automated source code analysis and manual review and compiles a consolidated report, detailing all vulnerabilities uncovered during the testing process along with severity levels and recommendations for how to remediate each vulnerability that was identified

Following diagram depicts high level activities in code review process

Apart from the formal code review practices based on Fagan Inspection, e-Zest follows best practices from lightweight development and code review processes which include

• Over-the-shoulder – One developer looks over the author’s shoulder as the latter walks through the code
• Email pass-around – Source code management system emails code to reviewers automatically after check-in is made
• Pair Programming – e-Zest and client’s team member develop code together at the same workstation; this practice is mainly common in Extreme Programming
• Tool-assisted code review – Client and e-Zest’s code review team use specialized tools designed for peer code review depending on project needs and specific customer needs.