Question
3
Replies
746
Views
Hf Management Services LLC
US
Posted: August 15, 2018
Last activity: September 13, 2018
Last activity: 13 Sep 2018 4:56 EDT
Closed
Is it possible to run static security scans ( Fortify) in pega for both pega generated code and custom code? I mean basically for the entire code base.
Is it possible to run static security scans ( Fortify) in pega for both pega generated code and custom code? I mean basically for the entire code base.
Posted: 4 years ago
Pegasystems Inc.
PL
Hi,
Application-tier vulnerability scanning is allowed when customers need to assess and report on the security of cloud-delivered applications, customer-directed development, and services for internal audit or compliance programs. In Pega Cloud you can perform penetration tests in PREPROD/ STAGE and PRODUCTION environment.
There is an article that describe entire process, please refer to: https://community.pega.com/knowledgebase/articles/vulnerability-testing-policy-pega-cloud
Posted: 4 years ago
Pegasystems Inc.
US
Hi Krishna,
For details on static scans of Pega’s product code, please contact Vendor Assessment Inquiries by email at [email protected] and that team will respond to your inquiry.