How to Enable OWASP Top 10 coverage on SonarCloud

[hiro-mpac (Hiro Takemoto)]

Our company uses SonarCloud and our company requires OWASP Top 10 coverage. I see some brief information regarding the coverage support ([OWASP Top 10 Security Vulnerability Coverage with SonarQube, SonarCloud & SonarLint]) but I would like to know how to enable this feature on SonarCloud.

[Colin]

Hey there.

While SonarCloud currently lacks Security Reports, it still includes OWASP Top 10 related rules. You can search for these under Rules or Issues and filter for Security Category > Owasp Top 10 [Year]

[Colin]

Hey @hiro-mpac

We recently launched SonarCloud Enterprise, which includes support for Security Reports!

Launching the new SonarCloud Team and SonarCloud Enterprise plans

Hello SonarCloud Users, We just launched two new plans on SonarCloud that will replace our existing offering. The SonarCloud Enterprise plan delivers a range of advanced features offering mission-critical flexibility, scalability, and performance. Available now as an early access program with the following key features: SSO through SAML Enterprise hierarchy to group multiple organizations Management reporting through Portfolios, security reports, and project reports Organization…