SASTAV and ARX ASPM PLATFORM Integrate Static Code Analysis with Application Security Risk Management

Russian developers ShiftLeft Security and ARX Security have ensured compatibility between the SASTAV SAST solution and the ARX ASPM PLATFORM. The integration allows static analysis of source code to be launched and configured directly from the ASPM platform interface. For each project, specialists can select repositories and branches, form rule sets, set scanning parameters, and establish quality gates that determine whether a product can be released with detected defects. Risk acceptance procedures are also configured within the same interface. SASTAV handles static code analysis, enabling creation and editing of rules, assignment of different check sets to individual repositories, and management of scanning parameters. ARX ASPM PLATFORM serves as a unified center for managing AppSec tools, collecting results from various analyzers, correlating related findings, assessing risks, and displaying the overall security posture of digital products. Both solutions leverage artificial intelligence at different stages: SASTAV uses it for defect verification, automatic triage, prioritization, and code change recommendations, while the ARX AI assistant determines defect statuses. The combined system reduces manual operations, accelerates DevSecOps project onboarding, and lowers the burden on AppSec teams.

AntiMalwareTranslated from Russian

Read at source

Russian developers ShiftLeft Security and ARX Security have ensured compatibility between the SASTAV SAST solution and the ARX ASPM PLATFORM. Static analysis of source code can now be launched and configured directly from the ASPM platform interface.

For each project, specialists can select repositories and branches, form rule sets, set scanning parameters, and establish quality gates — criteria that determine whether a product can be released with detected defects. Risk acceptance procedures are also configured within the same interface, requiring formal control rather than simple promises to fix issues.

SASTAV is responsible for static code analysis. The solution allows creation and editing of rules, assignment of different check sets to individual repositories, and management of scanning parameters. ARX ASPM PLATFORM acts as a unified center for managing AppSec tools. The platform collects results from various analyzers, correlates related findings, assesses risks, and displays the overall security posture of digital products.

Both solutions use artificial intelligence, but at different stages. In SASTAV, AI participates in defect verification, automatic triage, prioritization, and preparation of code change recommendations. This reduces the volume of raw warnings passed downstream. The AI assistant in ARX ASPM PLATFORM determines the statuses of defects found by the platform or imported from external systems.

After integration, a two-tier scheme emerges: SASTAV examines the code and filters findings, while ARX correlates them with results from other tools and helps decide which risks are acceptable. Developers expect to reduce manual operations, accelerate DevSecOps project connections, and lower the load on AppSec teams.

Meridian digestThe week's most consequential security stories, distilled into one briefing.See the digest

More in Other

Mail.ru Reduces Lifetime 1TB Cloud Storage Promo to Standard 8GB Quota for Select Users
Kimi K3 Open Model Surpasses Closed AI Leaders with Million-Token Context and 896 Experts
Innostage Completes Functional Testing of PT NGFW 1.10.3 Across 156 Criteria