Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
A dynamic application security testing solution that combines robust analytics with exceptional usability. This web application assessment leverages cutting-edge technologies such as HTML5 and Ajax. It can replicate the vulnerability exploitation process by tracking events, while automatically scanning subdirectories linked to a web application's URL. The system identifies security flaws from the URLs it crawls and performs open-source web library vulnerability assessments. Additionally, it integrates with Sparrow's analytical tools to address the shortcomings found in traditional DAST methods. The TrueScan module enhances detection capabilities through IAST integration, and its web-based interface allows for seamless access without the need for installation.
The centralized management system facilitates the organization and sharing of analysis results effectively. By utilizing browser event replay technology, it further identifies vulnerabilities in web applications. This solution also addresses the constraints of dynamic analysis through its collaboration with Sparrow SAST and RASP, while the IAST functionality via TrueScan enhances the overall security assessment process even further. As a comprehensive tool, it exemplifies the future of web application security testing.
Description
Veracode provides a holistic and scalable solution to manage security risk across all your applications. Only one solution can provide visibility into the status of all types of testing, including manual penetration testing, SAST, DAST and SCA.
API Access
Has API
No
API Access
Has API
No
Integrations
Active Directory
No
Azure DevOps Server
No
BMC AMI Data
No
Bitbucket
No
Cisco Vulnerability Management
No
CodeShip
No
Eclipse IDE
No
F5 BIG-IP Advanced WAF
No
Imperva WAF
No
Jenkins
No
Integrations
Active Directory
Yes
Azure DevOps Server
Yes
BMC AMI Data
Yes
Bitbucket
Yes
Cisco Vulnerability Management
Yes
CodeShip
Yes
Eclipse IDE
Yes
F5 BIG-IP Advanced WAF
Yes
Imperva WAF
Yes
Jenkins
Yes
Pricing Details
one-time payment
Free Trial
No
Free Version
No
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
No
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
Sparrow
Founded
2018
Country
South Korea
Website
www.sparrowfasoo.com/en/product/dast
Vendor Details
Company Name
Veracode
Founded
2006
Country
United States
Website
www.veracode.com
Product Features
Application Security
Analytics / Reporting
No
Open Source Component Monitoring
No
Source Code Analysis
No
Third-Party Tools Integration
No
Training Resources
No
Vulnerability Detection
No
Vulnerability Remediation
No
Product Features
Application Security
Analytics / Reporting
Yes
Open Source Component Monitoring
Yes
Source Code Analysis
Yes
Third-Party Tools Integration
Yes
Training Resources
Yes
Vulnerability Detection
Yes
Vulnerability Remediation
Yes
Static Application Security Testing (SAST)
Application Security
No
Dashboard
No
Debugging
No
Deployment Management
No
IDE
No
Multi-Language Scanning
No
Real-Time Analytics
No
Source Code Scanning
No
Vulnerability Scanning
No
Static Code Analysis
Analytics / Reporting
Yes
Code Standardization / Validation
Yes
Multiple Programming Language Support
Yes
Provides Recommendations
Yes
Standard Security/Industry Libraries
Yes
Vulnerability Management
Yes
Vulnerability Scanners
Asset Discovery
No
Black Box Scanning
No
Compliance Monitoring
No
Continuous Monitoring
No
Defect Tracking
No
Interactive Scanning
No
Logging and Reporting
No
Network Mapping
No
Perimeter Scanning
No
Risk Analysis
No
Threat Intelligence
No
Web Inspection
No