Fortify SCAN Process?

Question

I want to perform SCA analysis on my source code. By following some tutorials, I learned that we need a setup like the one below: 
 SSC (Software Security Center) Scan Central SAST Controller Sensor SCA Client 
 However, the trial version for Software Security Center is not available. The only possible way I found is Fortify On-Demand. 
 I understand that Fortify On-Demand is the cloud version of Software Security Center. 
 
 I am going to do a POC on Fortify SCA. Please provide me with solutions for the following questions: 
 
 Is there any difference between Fortify On-Demand and SSC (or on-premise version)? If yes, what are they? 
 In SSC, we configure all the mentioned components (Scan Central SAST Controller, SCA Client, Sensors). How do I set this up in the Fortify On-Demand version? 
 What is fcli?

Ethan Bell · Answer

I highly recommend you reach out to either one of our Fortify Partners or our Fortify Sales team to help. If your end goal is a POC for on-prem products (SSC, SC SAST, SCA), I would not start with FOD. There are some similarities on the backend, but they are quite a bit different on UI and frontend. FOD is our full stack AppSec as a service solution. 
 We also offer a Fortify Hosted solution. Here OpenText is responsible for the provision of Fortify Hosted on an AWS cloud platform that delivers ongoing infrastructure, application and support services remotely. 
 You can find additional information regarding Sales and Partners via Sales and General Inquiries | OpenText ( https://www.opentext.com/contact ).

Menu

Fortify User Discussions

Fortify SCAN Process?

Tags:

Suggested Answer

Resources