Skip to main content
Rencore Code (SPCAF)

Rencore Code (SPCAF)


What is Rencore Code (SPCAF)?

Many organizations that use Office 365 are exposed to security risks that they are unaware of. As they extend SharePoint to meet their business needs, they build applications using technologies that range from end-user Microsoft Flow to developer-focused SharePoint Framework.…

Read more
Recent Reviews

Rencore - why else?

10 out of 10
September 18, 2018
Rencore solutions are for me the platinum solution provider for Office 365 development and governance solutions. Not only are the products …
Continue reading
Read all reviews

Video Reviews

Leaving a video review helps other professionals like you evaluate products. Be the first one in your network to record a review of Rencore Code (SPCAF), and make your voice heard!

Return to navigation


View all pricing

What is Rencore Code (SPCAF)?

Many organizations that use Office 365 are exposed to security risks that they are unaware of. As they extend SharePoint to meet their business needs, they build applications using technologies that range from end-user Microsoft Flow to developer-focused SharePoint Framework. Unfortunately,…

Entry-level set up fee?

  • Setup fee optional


  • Free Trial
  • Free/Freemium Version
  • Premium Consulting / Integration Services

Would you like us to let the vendor know that you want pricing?

6 people also want pricing

Alternatives Pricing

What is GitLab?

GitLab DevSecOps platform enables software innovation by aiming to empower development, security, and operations teams to build better software, faster. With GitLab, teams can create, deliver, and manage code quickly and continuously instead of managing disparate tools and scripts. GitLab helps…

What is Sonatype Platform?

Sonatype secures the software supply chain and protects organizations' vital software development lifecycle(SDLC). The platform unites security teams and developers to accelerate digital innovation without sacrificing security or quality across the SDLC. With users among more than 2,000…

Return to navigation

Product Details

What is Rencore Code (SPCAF)?

Many organizations that use Office 365 are exposed to security risks that they are unaware of. As they extend SharePoint to meet their business needs, they build applications using technologies that range from end-user Microsoft Flow to developer-focused SharePoint Framework. Unfortunately, all of these custom applications are capable of circumventing the security measures organizations have in place exposing the organization and its data to security risks.

Rencore's mission is to help customers to extend SharePoint and Office 365 correctly and avoid security and compliance risks. Rencore integrates with the complete DevOps process and enables organizations to validate their applications already during the early development stages as well as when using them in production. With a vast database of over 1000 rules, we offer the only software solution in the market capable of detecting issues specific to extending SharePoint and Office 365 varying from security risks to not using market best practices.

Rencore helps users collaborate more securely and get more value out of their Office 365 investments. Their partnership with Microsoft ensures that Rencore compliments security capabilities available with Office 365 and the Microsoft cloud.

Rencore Code (SPCAF) Screenshots

Screenshot of Using third party libraries allows you to build your SharePoint and Office 365 applications faster and focus on functionality specific for your organization. But regularly, security vulnerabilities are discovered in these external dependencies. If left unpatched, they become a security risk for your organization and its data. Rencore automatically warns you when any of the third-party libraries used in your applications has known vulnerabilities that could be exploited to hack your environment.Screenshot of Third-party libraries are regularly updated to improve performance and stability. Many organizations however don’t know when a new version of the library they use in their SharePoint and Office 365 applications is released and they keep using the old versions which exposes them not only to bugs but also to security risks. Rencore automatically warns you when a new version of a library that you use is available allowing you to verify the contents and the impact of the upgrade.Screenshot of Without proper tooling, it’s impossible to successfully enforce an application governance plan in SharePoint and Office 365. The number of ways in which users could possibly extend SharePoint combined with the thousands of pages and hundreds of settings that can be configured, make it impossible to continuously monitor for alignment with the organizational policies. 

Rencore helps you understand the configuration of your tenant as well as discover the different SharePoint and Office 365 applications used in your organization. With Rencore you will easily understand how these applications are built, which dependencies they have and which possible risks they expose your organization to.Screenshot of Your organization tailors SharePoint and Office 365 to its specific needs to get more value of its investment in the platform. But each organization has different needs and is subject to different laws and regulations. 

Rencore allows you to configure what policies you want to enforce in your tenant. Each violation gets reported so that you can take corrective action and successfully enforce your organization’s application governance plan.Screenshot of As you start discovering issues in your SharePoint and Office 365 environment, you will be taking corrective actions to mitigate the risks. Rencore helps you track these issues and the related tasks so that you can easily follow up on the status of each issue and control that your organization is improving over time.Screenshot of It’s not enough to have your SharePoint and Office 365 applications verified for compliancy with your organization’s policies before using them in production. As your applications evolve, they will require changes and each change exposes you to a number of risks. Rencore helps you track how your applications change over time, even if these applications don’t follow centralized deployment and are managed by power-users. Each change is assessed for potential risks that it could expose your organization to.Screenshot of Just because your application works, doesn’t mean it’s robust and sustainable. Building SharePoint applications requires extensive knowledge and understanding of the platform and there are many considerations you have to take into account. Using its database of over 1000 rules, Rencore verifies your applications against the Microsoft recommendations and industry best practices to help you ensure that your application will yield the results it promised.Screenshot of SharePoint empowers users to solve their problems using turn-key solutions available on the Internet. By embedding a few-lines of code from the Internet, users can include complete applications in SharePoint. But users have hardly understanding of what the scripts they use actually do and how they handle confidential information. Rencore helps you discover and manage SharePoint applications and their dependencies allowing you to ensure the security of your confidential information.Screenshot of Rencore gives you powerful insights into the quality of your SharePoint Solutions and Add-ins, SharePoint Framework components, JavaScript and PowerShell files and detects security and performance issues before you deploy your applications to production.Screenshot of To be able to define impact of a change in your application or the effort required to maintain it, you have to first understand its complexity. Rencore analyzes the relationships between the different components of your applications and visualizes them helping you to understand the structure and complexity of your application which is invaluable as your application evolves over time.Screenshot of As the application is developed, often its manually maintained documentation becomes outdated. Rencore helps you understand the contents of your solution and with each analysis automatically generates documentation which always reflects the latest state of your solution.Screenshot of Metrics gathered by Rencore during the analysis of your applications, are input for your calculations to quantify the effort required to support your applications or get insights into the performance of your team.Screenshot of By continuously monitoring your applications using Rencore, you can track changes in quality over time. This gives you invaluable insights into your team’s performance and knowledge as well as the effect of scope changes on quality over time.

Rencore Code (SPCAF) Integrations

Rencore Code (SPCAF) Competitors

Rencore Code (SPCAF) Technical Details

Deployment TypesOn-premise, Software as a Service (SaaS), Cloud, or Web-Based
Operating SystemsWindows
Mobile ApplicationNo
Supported CountriesAll
Supported LanguagesUS English

Frequently Asked Questions

Veracode are common alternatives for Rencore Code (SPCAF).

Reviewers rate Support Rating highest, with a score of 9.1.

The most common users of Rencore Code (SPCAF) are from Enterprises (1,001+ employees).

Rencore Code (SPCAF) Customer Size Distribution

Small Businesses (1-50 employees)5%
Mid-Size Companies (51-500 employees)25%
Enterprises (more than 500 employees)70%
Return to navigation


View all alternatives
Return to navigation

Reviews and Ratings


Attribute Ratings


(1-11 of 11)
Companies can't remove reviews or game the system. Here's why
Ralph Rivas | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
There are different Rencore products I have become used to or experienced over the years and this review is specifically on the latest SPCAF product used at a successful client project last year. The following main points underscore how I feel this is an essential tool for modern SharePoint or Office 365 development especially in a professional setting:
  • Prompt, high-level support - We had a number of support calls mostly to fill in knowledge gaps rather than feature or system limitations or problems, and in all cases, they were handled quickly, professionally and, in all cases, imparting a lot of important knowledge sometimes kept close to the vest at similar vendors.
  • Right-sized product for the requirement - The SPCAF tool gives an SPFx and SharePoint development shop exactly the pieces needed with flexibility via their free editing tool and easy to access "default" settings easily referenced from Azure DevOps. The Integration was on point and, once the knowledge gaps were filled (see the support above), very efficient and quick to implement as well as go over with new team members or other interested groups.
  • Flexible Training offer provided - What was unexpected was an offer for about 10 hours of training geared towards DevOps and SPFx development from world-class MVPs for a reasonable price. I highly recommend others inquire into this as part of your package as it enhances in a more formal way what you may get from support calls over time.
  • Support - It is very quick relative to other vendors in this space and also very thorough.
  • Product Features - It appears to be the only product in the market that has ALL the pieces for a baseline SPFx project versus no tools or manual activities.
  • Documentation online could be more current and though this is a challenge for all vendors, it should be a major goal.
  • More examples beyond the core templates would be nice.
This is for SharePoint development and, although it may work, not really for general development or a replacement for tools such as FXCop, etc.
Score 9 out of 10
Vetted Review
Verified User
We use SPCAF across the organization for better code quality.
  • Faster review.
  • Enforce adherence to Industry best practices.
  • Integration with the DevOps process.
  • Make it a little more intuitive.
  • Better integration with DevOps tools like Jenkins.
Rencore is great when you need a quality check for all the types of code that might be implemented.
Christian Groß | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
We use Rencore to improve our software quality. Since we had the development and deployment audit from Rencore, we never have problems with the deployment of our software to our Microsoft Azure Environment.
  • The software development audit process is very good
  • With SharePoint Customization Analysis Framework, you see how good your code quality is
  • The Rencore certificate helps us to communicate our software quality to our customers
  • Cloud Analytics for small customers
You will save a lot of time, money and frustration when you have a good application lifecycle management process. Rencore helps you because they have the most experienced and motivated people.
October 01, 2018

Rencore makes us better!

Sébastien Levert | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
Using Rencore to ensure code quality and security is a must. We love the toolset and our product benefits from using Rencore!
  • Static analysis of code
  • Help transforming SharePoint solutions
  • Connecting with the community
  • More integrations with SPFx
  • Rencore as a service would be awesome using VSTS
Great for Product development and ensuring that our code is always secure and performant.
Maarten Eekels | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
We use their App Governance tools in our Managed Services department to audit the code both our own developers write and the code we receive from third-party developers. This gives us a quality check on the code, which we can then use to give back to the developers. Moreover, we use their App Security tools to check for security flaws in the environments of our customers.
  • The Rencore products make our lives easier. They provide automated quality and security checks that would otherwise require a lot of manual labour.
  • The Rencore products provide added value to our sales propositions.
  • Perhaps one portal to rule them all, would be great!
Rencore really makes your life easier and makes you sleep at night when you manage an Office 365 environment. A big chunk of security and quality checks can be automated and are processed using intelligent automation tooling. A no-brainer if you are looking for a secure and high quality environment.
Jussi Roine | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
We use Rencore's products and offerings to help our customers secure their customizations in the cloud.
  • Excellent support
  • Forward-thinking services
  • Easily reachable
  • SPCAF might be challenging for business users to start using.
SPCAF is very well suited for developers and architects needing to understand how their customization could be more secure, and if it follows the current guidance and set practices from Microsoft.
Paul Hunt | TrustRadius Reviewer
Score 9 out of 10
Vetted Review
Verified User
I work as a consultant with a Microsoft Gold Partner, our focus is on helping organisations migrate from on-premises infrastructure into Office 365 and Azure. Where we work with organisations that need to rebuild or migrate existing applications to the cloud, we recommend the tools from Rencor to assist in this process.
  • Rencore is a company formed of people that have lived the Microsoft community, they have a deep understanding of the needs of businesses that aren't met by the standard Microsoft tools.
  • Rencore staff are heavily involved in the Microsoft ecosystem, with many of them spending personal time working on projects such as the Patterns and Practices foundation. This adds to their strength and knowledge of the Microsoft platform.
  • Their products are well known in the community and often used by Microsoft staff themselves. Their support of MVPs ensures that they receive feed back at all levels ensuring a stronger platform of products.
  • I'd like to see a cheaper subset of tools for the 'citizen developer' to try and enforce good practice at all levels.
For Microsoft shops that are doing custom development on the Microsoft cloud platform in Office 365 and Azure, the Rencore toolset is an absolute must, especially if you are involved in converting farm solutions to cloud, or just moving into cloud development for the first time.
Bill Ayers | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
Used as a tool in delivering consultancy.
  • Save time by collecting information about customizations.
  • Prepare analysis report that can be presented to clients.
  • Make recommendations to assist in triage and proposal of problem remediation.
  • SharePoint development 'best practices' are very much dependent on context. I'd like to see some rules as advisory rather than mandatory by default, as the output of the tool can sometimes be alarmist when not understood in its technical context.
Well suited to organisations with a lot of legacy custom code. Less suitable in scenarios where there is no budget for re-writes etc.
Thomas Vochten | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
In the Office 365 and SharePoint ecosystem, code quality, platform stability and governance are a pretty big deal. Especially in on-premises SharePoint installations, bad customizations have been the root cause of performance issues. But also in the new cloud era quality assurance is of the utmost importance. We use Rencore to provide our customers insights into the code quality of the solutions they purchased or developed and to check if SharePoint Online environments are used according to the company's guidelines. We also use Rencore during our SharePoint health checks. More often than not, Rencore provides our customers valuable insights into long-standing performance and quality issues. In addition, Rencore enables our developers to transform exiting legacy codebases to the new world of client-side programming.
  • Unique expert knowledge of their target platforms. Not many companies have such a unique position in their target market. Their employees have a deep understanding of SharePoint, Office 365 and Azure and also regularly advise Microsoft on these matters.
  • Community involvement and contribution to open source projects. Key employees at Rencore are considered thought leaders in their area of expertise and contribute to high profile Microsoft open source initiatives.
  • Rencore's unique position when it comes to code quality analysis in the SharePoint space sets it apart. There's really no alternative.
  • Platform governance is another Rencore strength. No other product provides the insights into your SharePoint Online environment with full auditing of not only configuration changes but also who changed which code where and when. Again no alternatives exist.
  • Rencore's product line is of course still a bit of a niche: SharePoint code quality is not something every organization on the planet is concerned with - although Rencore does much more than that.
  • We feel Rencore's marketing efforts are mainly targeted at technologists. There's a lot of other potential, especially for their platform governance product.
If you have a lot of managed code running on SharePoint, Rencore will provide you with a unique understanding of its potential problems like memory leaks, security holes or developers not following best practices. Customers are often amazed at how much information Rencore can gather without even having the source code available! The transformation tooling is often even more compelling: it not only offers guidance on how legacy server-side code can be migrated to newer client-side technologies, it also translates a lot of code for you - automatically.
September 18, 2018

Rencore - why else?

Andy Talbot | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
Rencore solutions are for me the platinum solution provider for Office 365 development and governance solutions. Not only are the products superior, but the product and management team work very closely with Microsoft to understand the 'as is' and 'to be' states of Office 365 & Azure. Some of their production team are also senior members of the Microsoft backed 'Patterns and Practices' programme, which you can find via Support is rapid, thorough and you can trust what you are told. Andy Talbot - Microsoft MVP (Office Apps & Services)
  • Support
  • Rapid agile product development
  • Knowledge share
Support, knowledge, rapid product updates, and on the bleeding edge.
Alistair Pugin | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
When I engage as a consultant with a consulting firm, development house or customer that does any SharePoint development I always recommend that they purchase the Rencore product stack. In fact, in my new role as Head of Cloud Services at Tangent Solutions, our development team will be adopting Rencore as their defacto SharePoint development analysis tool when building applications for SharePoint.
In the past 5 years, the customers that have adopted SPCAF and the later SPTransformator platforms have raved about the product. I've used the tooling myself to perform assessments and the results are outstanding.
I am able to advise my clients on the best governance, patterns and practices and compliance development standards which invariably adds credibility to what I do as a professional in the Enterprise Information Management arena.
For me, its not about making money off selling Rencore, its about how the product improves the usage of SharePoint from a development perspective. In my role as an architect, the biggest problem we face is adoption and this is severely negated when custom solutions do not work. Rencore solves that problem, and assists developers with writing better code for SharePoint.

  • Code Analysis and review
  • Risk Profiling
  • Patterns and Practices guidance
  • Code Transformation
  • I really don't have any areas that I could find for improvement as an Architect.
Its simple really. If you write code for SharePoint on-prem or online, you have to use Rencore.
Rencore is the holy grail of tools for making sure that any organisation in any vertical that builds custom solutions on SharePoint can rest assured that they cannot improve their code any further (Security, Performance, Governance, Support, etc) after using the Rencore development stack.
Return to navigation