Abstract: A method and apparatus for auditing source code are disclosed. In one embodiment, a method includes generating on a display of a computing device a flowchart of a customized rule for auditing source code of a programming language using a rules builder of the computing device in response to a node of the programming language and a command associated with the customized rule applied to the flowchart. The method also includes converting the customized rule into a specified data format using the rules builder in response to an export command for the customized rule. The method further includes analyzing candidate source code of the programming language using a rules engine of the computing device based on the customized rule in response to an audit command for the candidate source code.