We develop code analysis tools in order to evaluate source or low-level code. We aim two types of diagnostic: robustness or vulnerabilty detection. We consider both source and low-level code. Our approach is based on a combination of static analyses and concolic execution.