Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Validate modifications across numerous supported resource types in all leading cloud service providers. Conduct scans of cloud resources during the build phase to identify misconfigured settings using a straightforward Python policy-as-code framework. Examine the connections between cloud resources through Checkov’s graph-oriented YAML policies. Run, test, and adjust runner parameters within the context of a specific repository's CI/CD processes and version control systems. Customize Checkov to create your own unique policies, providers, and suppression terms. Avoid the deployment of misconfigurations by integrating this process into the current workflows of developers. Facilitate automated annotations on pull or merge requests in your repositories, eliminating the need to establish a CI pipeline or perform routine checks. The Bridgecrew platform will automatically review new pull requests and provide comments highlighting any policy violations it uncovers, ensuring continuous compliance and security improvements in your cloud infrastructure. This proactive approach helps maintain best practices and enhances the overall security posture of your cloud environment.

Description

The Puma Scan Professional End User Edition enables developers to utilize Puma Scan through a Visual Studio extension, featuring improved capabilities, reduced false positives, and various support options. This edition’s license is valid for one year, with the possibility of annual renewal. In contrast, the Server Edition facilitates command line scanning and can be integrated into your build server, all without needing Visual Studio's overhead. A single Server license can be employed across five build agents within the same organization, and additional Build Agent Bundles are available in sets of five for larger needs. Furthermore, the Azure DevOps Extension introduces a Puma Scan build task into your Azure DevOps pipelines, enhancing your development workflow. With Azure DevOps Standard licenses, you can scan up to 20 build pipelines, while Azure DevOps Unlimited licenses permit unrestricted scanning across a single organization, ensuring comprehensive coverage for your projects. This flexibility allows organizations to choose the best licensing option based on their specific scanning requirements.

API Access

Has API

API Access

Has API

Screenshots View All

Screenshots View All

Integrations

Visual Studio
Amazon Web Services (AWS)
Azure DevOps Server
Bitbucket
Cider
CycloneDX
Enso
GitHub
GitLab
Google Cloud Platform
HTML
Helm
JSON
Jenkins
Kondukto
Kubernetes
Python
Serverless
Terraform
YAML

Integrations

Visual Studio
Amazon Web Services (AWS)
Azure DevOps Server
Bitbucket
Cider
CycloneDX
Enso
GitHub
GitLab
Google Cloud Platform
HTML
Helm
JSON
Jenkins
Kondukto
Kubernetes
Python
Serverless
Terraform
YAML

Pricing Details

Free
Free Trial
Free Version

Pricing Details

$299 per year
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

Prisma Cloud

Founded

2019

Country

United States

Website

www.checkov.io

Vendor Details

Company Name

Puma Security

Founded

2016

Country

United States

Website

pumasecurity.io/pricing/

Product Features

Static Code Analysis

Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management

Product Features

Static Application Security Testing (SAST)

Application Security
Dashboard
Debugging
Deployment Management
IDE
Multi-Language Scanning
Real-Time Analytics
Source Code Scanning
Vulnerability Scanning

Static Code Analysis

Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management

Alternatives

Alternatives

Trivy Reviews

Trivy

Aqua Security
CodeSonar Reviews

CodeSonar

CodeSecure
SonarQube Cloud Reviews

SonarQube Cloud

SonarSource