An SCA Product You Can Trust
Use Cases and Deployment Scope
Scanning of open source components in our applications. We scan for license usage, security issues and for software component quality. We run the Sonatype Nexus Vulnerability Scanner as part of the build process to ensure that all applications running in production are meeting the license, security and quality requirements. We also use the continuous monitoring to ensure that we stay up to date with should there be any security vulnerability found.
Pros
- Accuracy of data
- Supported Language
- Scan Time
Cons
- Cloud offering
- Integration to Atlassian JIRA
Most Important Features
- Integration into existing tooling
- Accuracy of data
Return on Investment
- Meet compliance requirements for managing third party software vulnerabilities
- Picking good components from the beginning