SChaurasia183107 (Community Member) asked a question.
Ask the Community
Get answers, share a use case, discuss your favorite features, or get input from the community.
By clicking “Accept All Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts.
.png){kind=logo}
These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.
These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.
These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.
Hi @SChaurasia183107 (Community Member) , Thanks for your question. The Veracode Community (this site) is best placed to answer questions related to Veracode's products (including Veracode Static analysis) or general questions on how to remediate various types of software security issues in code regardless of the tools or methods used to find those issues.
While I can't comment on specifics of how to setup and run Fortify's SAST tools, I can suggest that you take a look at the Microfocus documentation website(https://www.microfocus.com/en-us/support/documentation) and search for whichever product of theirs your organization is using.
If you are still having trouble with Fortify, you might consider seeing if your organization or development team would be interested in switching over to Veracode. We have a number of developer friendly features such as integration of SAST into the developer's IDE, Integrations with Veracode SAST and GitHub actions so that scanning can be done from the repository swiftly and easily, quick and easy access to a team of software security experts who can guide you and your developers through fixing security issues in their code through a live online meeting. We even offer an AI-based auto-remediation product (Veracode Fix) which can help developers rapidly remediate security issues in their code.
Being Cloud-based, Veracode SAST is very easy to get up and running, very little configuration is required and of course, we continually update our analysis capabilities so that all of our customers can benefit from improvements to our platform and technology without having to redeploy. Finally, we offer an analytics capability within the Veracode platform that can make it really easy to track and manage how well your organization is addressing software security risk, including a number of premade reports for management as well as the ability to create custom reports if you need to.
If you are interested in learning more about how Veracode might be a good fit for your organization let me know which company you're working with and we can arrange for a follow-up discussion.
Cheers,
-Bill