Hello Hunters! Today we’re happy to announce the launch of ShiftLeft CORE, the first Code Security Platform that combines our powerful SAST with Intelligent SCA and contextual security education all in one platform. All of our platform components are built on top of our core technology - the Code Property Graph. What this enables our customers to do is unique - with a single insertion, ShiftLeft CORE conducts multiple analyses on the same application code versus running multiple analyses using multiple products. This includes OWASP Top 10 vulnerabilities in custom code, secrets detection, security insights, and a brand new capability - Intelligent SCA. ShiftLeft CORE is also designed to fit seamlessly into the developer’s pull request-based workflow that decreases MTTR (Mean-time-to-repair). This has enabled ShiftLeft customers to go from analyzing once in months to analyzing multiple times per week. ShiftLeft CORE is comprised of the following components: NextGen SAST - the highest scoring SAST on the OWASP benchmark that constantly outperforms competition in speed of analysis. Intelligent SCA - we introduce the concept of “Attacker Reachability” to prioritize only a subset of OSS vulnerabilities for mitigation. Secrets detection - where we detect...secrets, or hard-coded values and sensitive information. Security Insights - potential security issues in the code that may not be vulnerabilities today but are bad practices based on industry best-practice. ShiftLeft Educate - provides developers in-context education to help them mitigate security vulnerabilities. All these components work together and seamlessly - both from a workflow perspective and from a user experience perspective. Try ShiftLeft CORE out (for free!) and let us know what you think! @shiftleftinc

ShiftLeft CORE: SAST + SCA + Education

Modern Code Security Platform ❤️️ by Developers

Modern Code Security Platform ❤️️ by Developers