Skip to content

Security Software

SAST Scanner

The SAST Scanner checks each pull request for security issues, so developers fix them before the code merges.

  • When to runOn every pull request
  • Delivered asSoftware as a service
  • Try itOn a free scoping call

Outcomes

What changes for your team

Fixed before merge

Developers see issues in the pull request.

The same rules in every repository

Every team's code is checked against the same rules.

Results in the GRC Platform

The scanner sends findings to the GRC Platform.

Features

What it checks

  • Code analysisSecurity rules for popular languages.
  • Pull request feedbackResults appear in the pull request.
  • TuningRules adjusted to reduce noise.
  • ThresholdsDecide what blocks a merge.
  • DashboardsOpen issues by repository.
  • Pipeline readyRuns in your CI.

See it working

What you see in the product

A sample screen with made-up data.

Related

Often paired with

All services

Security Software

Repo Leak Scanner

Watches public code sites for your code, keys and passwords.

  • Public repositories
  • Secrets
  • Daily checks

Security Software

DAST Scanner

Tests running applications for vulnerabilities before each release.

  • Running apps
  • Pre-release
  • Severity scoring

Next step

See the SAST Scanner on your code

On a free 30-minute call we scan a repository you choose and walk you through the results.