Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Validate modifications across numerous supported resource types in all leading cloud service providers. Conduct scans of cloud resources during the build phase to identify misconfigured settings using a straightforward Python policy-as-code framework. Examine the connections between cloud resources through Checkov’s graph-oriented YAML policies. Run, test, and adjust runner parameters within the context of a specific repository's CI/CD processes and version control systems. Customize Checkov to create your own unique policies, providers, and suppression terms. Avoid the deployment of misconfigurations by integrating this process into the current workflows of developers. Facilitate automated annotations on pull or merge requests in your repositories, eliminating the need to establish a CI pipeline or perform routine checks. The Bridgecrew platform will automatically review new pull requests and provide comments highlighting any policy violations it uncovers, ensuring continuous compliance and security improvements in your cloud infrastructure. This proactive approach helps maintain best practices and enhances the overall security posture of your cloud environment.
Description
Find and fix security problems early with the most accurate results available in the industry. The OpenText™, Fortify™, Static Code Analyzer pinpoints security vulnerabilities, prioritizes issues that are most serious, and provides detailed instructions on how to fix these. A centralized software security manager helps developers resolve issues faster. Support for 1,657 vulnerabilities categories in 33+ languages and more than 1 million APIs. Fortify's integration platform allows you to embed security into the application development tools that you use. Audit Assistant allows you to control the speed and accuracy SAST scans by adjusting the depth and minimizing false-positives. Scale SAST scans dynamically up or down in order to meet the changing needs of the CI/CD pipe. Shift-left security is achieved in a single solution for cloud-native apps, from IaC through to serverless.
API Access
Has API
API Access
Has API
Integrations
Amazon Web Services (AWS)
Bitbucket
GitHub
Jenkins
Visual Studio
AWS CloudFormation
Azure DevOps Server
Cider
Gradle
Helm
Integrations
Amazon Web Services (AWS)
Bitbucket
GitHub
Jenkins
Visual Studio
AWS CloudFormation
Azure DevOps Server
Cider
Gradle
Helm
Pricing Details
Free
Free Trial
Free Version
Pricing Details
No price information available.
Free Trial
Free Version
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Vendor Details
Company Name
Prisma Cloud
Founded
2019
Country
United States
Website
www.checkov.io
Vendor Details
Company Name
OpenText
Founded
1991
Country
Canada
Website
www.opentext.com/products/fortify-static-code-analyzer
Product Features
Static Code Analysis
Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management
Product Features
Application Security
Analytics / Reporting
Open Source Component Monitoring
Source Code Analysis
Third-Party Tools Integration
Training Resources
Vulnerability Detection
Vulnerability Remediation
Static Application Security Testing (SAST)
Application Security
Dashboard
Debugging
Deployment Management
IDE
Multi-Language Scanning
Real-Time Analytics
Source Code Scanning
Vulnerability Scanning
Static Code Analysis
Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management