Security Reviewer suite provides a bi-directional integration with your DevOps

Open

Integration are made by:

•CI/CD plugins

•Developer’s IDE

•REST API

•CLI Interface

•External Dashboards integration

•ITSM Integration

•SCM Integration

•Package Managers integration

•Bug Trackers integration

•Automated Notifications to external systems like Slack, Microsoft Teams and any Webhooks-compliant solution

Notifications

Once an Analysis is terminated, an e-mail or Slack message or Microsoft Teams event or a Webhook will be sent. The results can be published on several Dashboards.

Software Bill Of Materials

Multiple efforts between government and industry are attempting to define Software Transparency. Some of these efforts will lead to increased compliance or regulatory requirements. Software Transparency is often achieved through the publishing of bill-of-materials (BOM). A BOM is synonymous to the list of ingredients in a recipe. Both are an implementation of transparency.

There are multiple SBOM standards including CycloneDX, SPDX, and SWID, each having their own strengths and use-cases they were designed to solve.

Security Reviewer Ecosystem support all those standards.