Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 2 Ratings

Total
ease
features
design
support

Description

Asterisk is an innovative platform powered by AI that streamlines the process of identifying, verifying, and addressing security vulnerabilities in codebases, mimicking the expertise of a human security engineer. It shines in uncovering intricate business logic flaws via context-sensitive scanning and delivers thorough reports with an impressive rate of near-zero false positives. Its standout features encompass automated patch generation, constant real-time surveillance, and extensive compatibility with leading programming languages and frameworks. The Asterisk methodology includes indexing the codebase to develop precise mappings of call stacks and code graphs, which is essential for accurate vulnerability detection. The platform has proven its effectiveness by autonomously identifying vulnerabilities in various systems. Established by a group of experienced security researchers and competitive Capture The Flag (CTF) participants, Asterisk is dedicated to harnessing the power of AI to simplify code security audits and improve the process of vulnerability identification. As the digital landscape evolves, Asterisk continues to adapt, ensuring that software security remains a top priority for developers everywhere.

Description

SonarQube Server serves as a self-hosted solution for ongoing code quality assessment, enabling development teams to detect and address bugs, vulnerabilities, and code issues in real time. It delivers automated static analysis across multiple programming languages, ensuring that the highest standards of quality and security are upheld throughout the software development process. Additionally, SonarQube Server integrates effortlessly with current CI/CD workflows, providing options for both on-premise and cloud deployments. Equipped with sophisticated reporting capabilities, it assists teams in managing technical debt, monitoring progress, and maintaining coding standards. This platform is particularly well-suited for organizations desiring comprehensive oversight of their code quality and security while maintaining high performance levels. Furthermore, SonarQube fosters a culture of continuous improvement within development teams, encouraging proactive measures to enhance code integrity over time.

API Access

Has API

API Access

Has API

Screenshots View All

Screenshots View All

Integrations

AWS CloudFormation
BMC AMI Ops Automation for Capping
C++
COBOL
Coco Code Coverage
CodePeer
Docker
JavaScript
JupiterOne
Objective-C
OpenText Static Application Security Testing
OpsLevel
Ozone
Phoenix Security
Plandek
Propelo
SENTRIO
SQL
SonarQube Cloud
Tromzo

Integrations

AWS CloudFormation
BMC AMI Ops Automation for Capping
C++
COBOL
Coco Code Coverage
CodePeer
Docker
JavaScript
JupiterOne
Objective-C
OpenText Static Application Security Testing
OpsLevel
Ozone
Phoenix Security
Plandek
Propelo
SENTRIO
SQL
SonarQube Cloud
Tromzo

Pricing Details

No price information available.
Free Trial
Free Version

Pricing Details

No price information available.
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

Asterisk

Website

asterisk.so/

Vendor Details

Company Name

SonarSource

Founded

2008

Country

Switzerland

Website

www.sonarsource.com/products/sonarqube/

Product Features

Product Features

Application Security

Analytics / Reporting
Open Source Component Monitoring
Source Code Analysis
Third-Party Tools Integration
Training Resources
Vulnerability Detection
Vulnerability Remediation

Static Application Security Testing (SAST)

Application Security
Dashboard
Debugging
Deployment Management
IDE
Multi-Language Scanning
Real-Time Analytics
Source Code Scanning
Vulnerability Scanning

Static Code Analysis

Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management

Alternatives

Alternatives

SonarQube for IDE Reviews

SonarQube for IDE

SonarSource