Question
Marsh & McLinen
GB
Last activity: 8 Mar 2018 2:08 EST
Is there any Pega-built tools for Static and Dynamic code analysis?
Hi ,
Is there any in Pega-in built tools/framework for Static and Dynamic code analysis to identify security Vulnerabilities ?
If not, do Pega offer any assurances around their platform and framework in this regard?
EPAM Systems, Inc.
ES
Hi @NarendraM9421,
Thanks for posting on PSC.
Pega Platform provides powerful capabilities for implementing security in your applications, especially when you deploy guardrail-compliant applications. The Pega Platform model-driven architecture allows you to secure applications in most cases by configuring built-in features, and you do not need to rely on custom code built by developers who are not security experts.
Refer these links:-
- Security checklist to be followed
Hope it answers your query, kindly notify if it does by marking this post as answered/helpful for larger Pega audience.
Regards,
Asif
EPAM Systems, Inc.
ES
- Security and Data Protection
- How to define the security model and organisation at application level?
Pegasystems Inc.
IN
Hi,
You can use Rule Security Analyzer for static analysis of not auto generated code to find specific JavaScript or SQL coding patterns that might indicate a security vulnerability.. (https://community.pega.com/sites/default/files/help_v73/procomhelpmain.htm security/sec-rule-security-con.htm).
Regards,
Santhosh