Any recommendations for secure software development assessment tools? What’s your preference?

Security & GRC Engineering

1.6k views1 Upvote2 Comments

Sort by:

Board Member, Advisor, Executive Coach in Software2 years ago

I like https://qwiet.ai/

Co-Founder & CISO in Finance (non-banking)2 years ago

I personally like Eureka from FwdSecurity. It allows us to have a SAST, SCA and DAST tool all in one!

Content you might like

What's in your FinOps tool kit?

AWS Cost Explorer26%

Azure Cost Management45%

GCP Cost Tools14%

CloudHealth (VMware)7%

Cloudability (Apptio)1%

Other (Please share below!)5%

View Results

Zoom Video Communications has agreed to pay $85 million to settle a California lawsuit. They have been accused of improperly sharing customer information with Facebook, Google and LinkedIn and allowing strangers to enter unprotected Zoom meetings in an activity known as "Zoombombing." Have you ever been "zoombombed" in a meeting?

Yes60%

No39%

Do you find it hard to say no to unreasonable requests for your software team? How do you frame your “no” so it doesn’t cause problems with the team making requests?

Has anyone recently implemented platform engineering? Could you share the pros and cons that your team is experiencing?

Do you have a lock out policy for system accounts? If so, how many attempts do you have it set too?

Have you considered not having a lock out policy where accounts are vaulted / rotated & standing access is removed?

Any recommendations for secure software development assessment tools? What’s your preference?

Sort by:

Content you might like

What's in your FinOps tool kit?

Do you find it hard to say no to unreasonable requests for your software team? How do you frame your “no” so it doesn’t cause problems with the team making requests?

Has anyone recently implemented platform engineering? Could you share the pros and cons that your team is experiencing?

Do you have a lock out policy for system accounts? If so, how many attempts do you have it set too?

Have you considered not having a lock out policy where accounts are vaulted / rotated & standing access is removed?

What sets us apart?

RELATED ONE-MINUTE INSIGHTS

How are U.S. CISOs Addressing Liability Risk?

CrowdStrike Outage: Impact And Recovery

Impact & Perceptions of A Privacy-First Digital Era

Challenges & Tools For A Privacy-First Internet Age

IT and Infosec Collaboration on Vulnerability Patching

Take Your Insights On-the-Go

Any recommendations for secure software development assessment tools? What’s your preference?

Sort by:

Content you might like

What's in your FinOps tool kit?

Do you find it hard to say no to unreasonable requests for your software team? How do you frame your “no” so it doesn’t cause problems with the team making requests?

Has anyone recently implemented platform engineering? Could you share the pros and cons that your team is experiencing?

Do you have a lock out policy for system accounts? If so, how many attempts do you have it set too? Have you considered not having a lock out policy where accounts are vaulted / rotated & standing access is removed?

What sets us apart?

RELATED ONE-MINUTE INSIGHTS

How are U.S. CISOs Addressing Liability Risk?

CrowdStrike Outage: Impact And Recovery

Impact & Perceptions of A Privacy-First Digital Era

Challenges & Tools For A Privacy-First Internet Age

IT and Infosec Collaboration on Vulnerability Patching

Take Your Insights On-the-Go

Do you have a lock out policy for system accounts? If so, how many attempts do you have it set too?

Have you considered not having a lock out policy where accounts are vaulted / rotated & standing access is removed?