Ratings and Reviews 0 Ratings

Total
ease
features
design
support

This software has no reviews. Be the first to write a review.

Write a Review

Ratings and Reviews 0 Ratings

Total
ease
features
design
support

This software has no reviews. Be the first to write a review.

Write a Review

Alternatives to Consider

  • TrustInSoft Analyzer Reviews & Ratings
    6 Ratings
    Company Website
  • Parasoft Reviews & Ratings
    126 Ratings
    Company Website
  • Aikido Security Reviews & Ratings
    100 Ratings
    Company Website
  • AnalyticsCreator Reviews & Ratings
    46 Ratings
    Company Website
  • Windocks Reviews & Ratings
    6 Ratings
    Company Website
  • AdRem NetCrunch Reviews & Ratings
    147 Ratings
    Company Website
  • Stack AI Reviews & Ratings
    20 Ratings
    Company Website
  • Project Insight Reviews & Ratings
    101 Ratings
    Company Website
  • Reprise License Manager Reviews & Ratings
    86 Ratings
    Company Website
  • ThinkAutomation Reviews & Ratings
    15 Ratings
    Company Website

What is Puma Scan?

The Puma Scan Professional End User Edition provides developers with the opportunity to leverage Puma Scan through a Visual Studio extension, boasting enhanced features, fewer false positives, and numerous support alternatives. This particular license is effective for a duration of one year, with options for renewal on an annual basis. On the other hand, the Server Edition allows for command line scanning and can be seamlessly integrated into your build server, eliminating the need for Visual Studio's resources. A single Server license is usable across five build agents within a single organization, and for those with larger demands, additional Build Agent Bundles can be purchased in sets of five. Moreover, the Azure DevOps Extension incorporates a Puma Scan build task into your Azure DevOps pipelines, streamlining your development process. With Azure DevOps Standard licenses, users can scan up to 20 build pipelines, while the Azure DevOps Unlimited licenses provide the capability for unrestricted scanning across an entire organization, guaranteeing thorough coverage for all projects. This range of options empowers organizations to select the most suitable licensing arrangement tailored to their unique scanning needs, ensuring they can effectively manage their software security. Additionally, the flexibility offered by these editions allows for scalability as the organization grows and its scanning requirements evolve.

What is Checkov?

Ensure that modifications are validated across a variety of resource types supported by major cloud service providers. During the build phase, utilize a simple Python policy-as-code framework to conduct scans of cloud resources aimed at identifying any misconfigurations. Leverage Checkov’s graph-oriented YAML policies to investigate the interconnections among cloud resources. Within the specific context of a repository's CI/CD processes and version control systems, execute, test, and fine-tune runner parameters. Tailor Checkov to develop your own distinct policies, providers, and suppression terms that align with your needs. By integrating this validation process into the developers' existing workflows, you can effectively prevent the deployment of misconfigurations. Enable automated comments on pull or merge requests in your repositories, thereby negating the necessity for establishing a CI pipeline or conducting periodic checks. The Bridgecrew platform is designed to automatically assess new pull requests, offering feedback that points out any policy violations it detects, which is crucial for maintaining continuous compliance and enhancing security within your cloud infrastructure. This proactive methodology significantly contributes to upholding best practices while simultaneously fortifying the overall security framework of your cloud environment. Regularly reviewing and refining these practices will ensure long-term resilience against potential vulnerabilities.

Media

Media

Integrations Supported

Visual Studio
.NET
Amazon Web Services (AWS)
Archipelo
C#
Cider
CycloneDX
Enso
GitHub
GitLab
Google Cloud Platform
HTML
Helm
JSON
Jenkins
Kondukto
Microsoft Azure
Serverless
Terraform
YAML

Integrations Supported

Visual Studio
.NET
Amazon Web Services (AWS)
Archipelo
C#
Cider
CycloneDX
Enso
GitHub
GitLab
Google Cloud Platform
HTML
Helm
JSON
Jenkins
Kondukto
Microsoft Azure
Serverless
Terraform
YAML

API Availability

Has API

API Availability

Has API

Pricing Information

$299 per year
Free Trial Offered?
Free Version

Pricing Information

Free
Free Trial Offered?
Free Version

Supported Platforms

SaaS
Android
iPhone
iPad
Windows
Mac
On-Prem
Chromebook
Linux

Supported Platforms

SaaS
Android
iPhone
iPad
Windows
Mac
On-Prem
Chromebook
Linux

Customer Service / Support

Standard Support
24 Hour Support
Web-Based Support

Customer Service / Support

Standard Support
24 Hour Support
Web-Based Support

Training Options

Documentation Hub
Webinars
Online Training
On-Site Training

Training Options

Documentation Hub
Webinars
Online Training
On-Site Training

Company Facts

Organization Name

Puma Security

Date Founded

2016

Company Location

United States

Company Website

pumasecurity.io/pricing/

Company Facts

Organization Name

Prisma Cloud

Date Founded

2019

Company Location

United States

Company Website

www.checkov.io

Categories and Features

Static Application Security Testing (SAST)

Application Security
Dashboard
Debugging
Deployment Management
IDE
Multi-Language Scanning
Real-Time Analytics
Source Code Scanning
Vulnerability Scanning

Static Code Analysis

Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management

Categories and Features

Static Code Analysis

Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management

Popular Alternatives

CodeSonar Reviews & Ratings

CodeSonar

CodeSecure

Popular Alternatives

Trivy Reviews & Ratings

Trivy

Aqua Security
SonarQube Cloud Reviews & Ratings

SonarQube Cloud

SonarSource