RegexAudit

Audit regular expressions for ReDoS vulnerability and catastrophic backtracking

Code & DevelopmentFree

RegexAudit analyzes regular expressions to detect patterns vulnerable to catastrophic backtracking and ReDoS attacks. The tool identifies ambiguous quantifier nesting, overlapping alternation branches, and exponential state space patterns, then suggests equivalent safe rewrites that match the same language without backtracking risk. It estimates worst-case matching time for adversarial inputs and generates test strings that trigger pathological behavior. Security teams use it to audit regex patterns in input validation code before deployment.

Key Features

• ✓ReDoS vulnerability detection
• ✓Catastrophic backtracking analysis
• ✓Safe rewrite suggestions
• ✓Adversarial input generation
• ✓Worst-case time estimation