Manage code weakness issues - Ingest third-party SAST findings to create actionable issues, enabling you to prioritize and track remediation and enhancing your security posture. - Administrator Guide - Cortex XSIAM - Cortex Cloud Posture Management - Cortex CLOUD - Cortex - Security Operations

SAST code weakness scanners safeguard your applications by analyzing custom source code for security flaws, such as injection vulnerabilities, authentication bypasses, insecure cryptographic usage, and unsafe data handling, that could lead to exploitation in production environments. By detecting code weaknesses at code-time, the SAST scanner closes the gap between development practices and production-time security posture, preventing injection attacks, cross-site scripting, insecure deserialization, and other OWASP Top 10 risks from silently propagating into live environments.

Currently, Cortex Cloud does not support native SAST scanners. You can ingest Static Application Security Testing (SAST) findings from supported third-party vendors. These findings are raw security observations from your external scanners that Cortex Cloud then enriches and prioritizes to produce actionable remediation to mitigate code weaknesses.