Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
S4 enables Salesforce DevSecOps to be established in the CI/CD pipeline within less than an hour. S4 empowers developers with the ability to identify and fix vulnerabilities before they reach production, which could lead to data breaches. Secure Salesforce during development reduces risk, and speeds up deployment. Our patented SaaS Security scanner™, S4 for Salesforce™, automatically assesses Salesforce's security posture. It uses its full-spectrum continuous app security testing (CAST), platform that was specifically designed to detect Salesforce vulnerabilities. Interactive Runtime Testing, Software Composition Analysis and Cloud Security Configuration Review. Our static application security testing engine (SAST) is a core feature in S4. It automates scanning and analysis for custom source code within Salesforce Orgs including Apex, VisualForce and Lightning Web Components and related-JavaScript.
Description
PVS-Studio is a static application security testing tool that enhances code quality, security, and safety. It helps find errors and potential vulnerabilities in C, C++, C#, Java, JavaScript, TypeScript and Go code. It works on Windows, Linux, and macOS.
Pros:
- Various analysis types: intermodular, incremental, data flow analysis, taint analysis;
- Integrates into cloud platforms;
- Works offline & on-premise;
- Provides cross-platform integration;
- Offers ways to handle false positives;
- Quick technical support directly from developers;
- 1200+ diagnostics with descriptions and examples;
- Provides compliance with safety & security standards: OWASP TOP 10, MISRA C/C++, CWE, SEI CERT;
- Provides detailed reports and reminders for developers and managers;
- Efficiently handles legacy code (baselining of analyzer results);
- Active support of the Open Source Community, analysis of open-source projects;
- Has integration with popular IDEs, code quality platforms, CI/CD, build systems.
Good option for:
- game developers (Unity & UE integration included)
- embedded developers (embedded platform support);
- DevSecOps experts (CLI)
- project managers (code quality platform integration included)
- FinTech (compliance with OWASP ASVS)
- mature projects (seamless legacy handling)
API Access
Has API
Yes
API Access
Has API
No
Integrations
Android Studio
No
C++
No
CLion
No
Docker
No
Eclipse IDE
No
GitHub
No
GoLand
No
IAR Embedded Workbench
No
Incredibuild
No
Java
No
Integrations
Android Studio
Yes
C++
Yes
CLion
Yes
Docker
Yes
Eclipse IDE
Yes
GitHub
Yes
GoLand
Yes
IAR Embedded Workbench
Yes
Incredibuild
Yes
Java
Yes
Pricing Details
No price information available.
Free Trial
Yes
Free Version
No
Pricing Details
Trial version and pricing can be found on the website PVS-Studio or be requested via the contact form.
Free Trial
Yes
Free Version
Yes
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
No
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
Yes
Linux
Yes
Chromebook
No
Customer Support
Business Hours
Yes
Live Rep (24/7)
Yes
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
Yes
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
Yes
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
No
Vendor Details
Company Name
DigitSec
Founded
2017
Country
United States
Website
www.digitsec.com
Vendor Details
Company Name
PVS-Studio
Founded
2008
Country
Kazakhstan
Website
pvs-studio.com/en/pvs-studio/
Product Features
Vulnerability Scanners
Asset Discovery
No
Black Box Scanning
No
Compliance Monitoring
No
Continuous Monitoring
No
Defect Tracking
No
Interactive Scanning
No
Logging and Reporting
No
Network Mapping
No
Perimeter Scanning
No
Risk Analysis
No
Threat Intelligence
No
Web Inspection
No
Product Features
Application Development
Access Controls/Permissions
No
Code Assistance
No
Code Refactoring
Yes
Collaboration Tools
No
Compatibility Testing
No
Data Modeling
No
Debugging
Yes
Deployment Management
Yes
Graphical User Interface
No
Mobile Development
No
No-Code
No
Reporting/Analytics
Yes
Software Development
Yes
Source Control
No
Testing Management
Yes
Version Control
No
Web App Development
No
Automated Testing
Hierarchical View
No
Move & Copy
No
Parameterized Testing
Yes
Requirements-Based Testing
No
Security Testing
Yes
Supports Parallel Execution
Yes
Test Script Reviews
No
Unicode Compliance
No
DevOps
Approval Workflow
Yes
Dashboard
Yes
KPIs
Yes
Policy Management
No
Portfolio Management
No
Prioritization
Yes
Release Management
Yes
Timeline Management
No
Troubleshooting Reports
Yes
Source Code Management
Access Controls/Permissions
No
Bug Tracking
Yes
Build Automation
No
Change Management
Yes
Code Review
Yes
Collaboration
No
Continuous Integration
Yes
Repository Management
No
Version Control
Yes
Static Application Security Testing (SAST)
Application Security
Yes
Dashboard
Yes
Debugging
Yes
Deployment Management
Yes
IDE
Yes
Multi-Language Scanning
Yes
Real-Time Analytics
No
Source Code Scanning
Yes
Vulnerability Scanning
Yes