---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Malicious code

# Malicious code {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
The Malicious Code category ensures that best efforts are made to confirm that your code is free of vulnerabilities and unwanted functionality.
This includes ensuring secure and proper handling for malicious activity, no time based attacks, no outbound communications to untrusted destinations, and that no unauthorized or attacker-controlled code is included. This category
includes audit or third party libraries from the application codebase.
* **[Apply static analysis to all users](https://www.servicenow.com/docs/jedD0TeMuBZf_jSIO06gLw)**   
  Configure static analysis to examine scripts from both authenticated and unauthenticated users rather than limiting analysis to guest users only.
* **[Block rooted or jailbroken mobile devices](https://www.servicenow.com/docs/DhQRJk5eXbPE~mjYeYxXeA)**   
  Secure your instance by preventing unauthorized access from jailbroken devices.
* **[Enable Code Signing for application configuration data and scripts \[Removed in Security Center 1.3\]](M4U1Ik9mFEkhNL7Y2QjX5A)**   
  Manage Code Signing for application configuration data and scripts on your instance.
* **[Enable static analysis](https://www.servicenow.com/docs/EJXqHaXPe6XMKhHXylkxdQ)**   
  Enable static analysis to provide compile-time security checks for JavaScript code in the scripting sandbox.
* **[Enable synchronous mode for static analysis](https://www.servicenow.com/docs/VK~gyXSlS4HmRlTqXkrFJg)**   
  The com.glide.script.static_analysis.enable_sync property controls whether static analysis security violations block script execution synchronously or are recorded asynchronously. Setting this property to <kbd class="ph userinput">true</kbd> enables synchronous mode, which blocks scripts with security violations.
* **[Enforce signature verification for Flow Designer artifacts](https://www.servicenow.com/docs/qtd9QsTqUDrSCqX2Exvysg)**   
  The com.glide.hub.code_signing.full.validation.enabled property controls the strictness of checks enforced when Code Signing is fully enabled.