Looking for a IAST app and software scanner

SonarQube
1

My company is considering the option of adding SonarQube to the DevSecOps pineline, and I’m tasked with evaluating several SAST, DAST or a combination of both IAST. Does SonarQube consist of both features? We are currently using Checkmarx, which is more SAST centered.

Patrick

2

Hi Patrick,

SonarQube is purely static analysis.

 
HTH,
Ann

3

Thank you, Ann. Any recommendations for an IAST security tool?