ZeroNorth Integrates With ShiftLeft
December 08, 2020

ZeroNorth announced support for ShiftLeft’s NextGen Static Analysis (NG SAST), a modern code analysis solution purpose-built to support developer workflows.

This latest, strategic integration enables joint customers to leverage the unique application security automation and orchestration capabilities of the ZeroNorth platform together with the speed and accuracy of NG SAST to rapidly identify, prioritize and remove vulnerabilities at the speed of DevOps.

“Our users love the integration between ShiftLeft NextGen Static Analysis and ZeroNorth. ShiftLeft provides instant security feedback with every pull request and developers never have to wait. With the ZeroNorth integration this feedback and overall security posture is quickly and comprehensively relayed to AppSec teams and Security Managers. Our customers have reported major increases in developer productivity and ease of managing their security programs,” commented Alok Shukla, VP Products at ShiftLeft.

The ZeroNorth platform accelerates application delivery by orchestrating an organization’s security scanning tools to rapidly identify vulnerabilities throughout the software development life cycle (SDLC). As part of this process, ZeroNorth automatically ingests and normalizes disparate scan findings into a common risk framework and delivers streamlined tickets to developers for remediation, prioritized by criticality to the business. ZeroNorth seamlessly integrates with DevOps toolchains so that developers can quickly remediate vulnerabilities without changing their workflows or being flooded with low-priority or duplicate issues.

“The integration with ShiftLeft’s NG SAST tool is a natural fit for ZeroNorth. Both technologies share a common vision of making application security as simple and frictionless as possible for developers,” commented Christian van den Branden, SVP, Engineering and Product Management at ZeroNorth. “The addition of NG SAST to ZeroNorth’s growing roster of leading scanning tools reinforces our strategy of integrating with customers’ tools of choice for AppSec throughout the SDLC. With these integrations, ZeroNorth empowers customers to remediate application security vulnerabilities quickly, easily and seamlessly as an integral process within their DevOps workflows.”

Share this

Industry News

May 25, 2022

JFrog introduced Project Pyrsia, an open-source software community initiative that utilizes blockchain technology to secure software packages (A.K.A Binaries) from vulnerabilities and malicious code.

May 25, 2022

Kasm Technologies, in partnership with Docker, has developed Kasm Workspaces as a Containerized Desktop Infrastructure platform for streaming remote workspaces directly to your web browser.

May 25, 2022

Cascadeo announced the integration of Amazon DevOps Guru with cascadeo.io, Cascadeo’s cloud monitoring and management platform that provides users with a single view of multi-cloud or hybrid infrastructure environments.

May 24, 2022

Oracle announced the availability of Java 18, the latest version of the programming language and development platform.

May 24, 2022

Docker announced the acquisition of Tilt, makers of a development environment as code for teams on Kubernetes.

May 24, 2022

F5 announced the release of F5 NGINX for Microsoft Azure, an Azure-native service offering developed in partnership with Microsoft, that helps customers deliver modern applications on Azure with just a few clicks.

May 24, 2022

Pegasystems announced a strategic partnership with Google Cloud that will help enable joint clients to accelerate their digital transformations with Pega’s low-code enterprise software on Google Cloud’s highly scalable cloud services.

May 23, 2022

Sauce Labs announced the release of contract testing with mocking on the Sauce Labs API Testing Platform.

May 23, 2022

Pure Storage announced a series of updates to its Portworx portfolio.

May 23, 2022

StackHawk has secured $20.7 million in capital.

May 19, 2022

Jellyfish announced the launch of Jellyfish Benchmarks, a way to add context around engineering metrics and performance by introducing a method for comparison.

May 19, 2022

Solo.io announced the addition and integration of Cilium networking into its Gloo Mesh platform, providing a complete application-networking solution for companies’ cloud-native digital transformation efforts.

May 19, 2022

Aqua Security announced multiple updates to Aqua Trivy, making it a unified scanner for cloud native security.

May 18, 2022

Red Hat unveiled updates across its portfolio of developer tools designed to help organizations build and deliver applications faster and more consistently across Kubernetes-based hybrid and multicloud environments.

May 18, 2022

Armory announced public early access to their new Continuous Deployment-as-a-Service product.