Russian developers ShiftLeft Security and ARX Security have ensured compatibility between the SASTAV SAST solution and the ARX ASPM PLATFORM. Static analysis of source code can now be launched and configured directly from the ASPM platform interface.
For each project, specialists can select repositories and branches, form rule sets, set scanning parameters, and establish quality gates — criteria that determine whether a product can be released with detected defects. Risk acceptance procedures are also configured within the same interface, requiring formal control rather than simple promises to fix issues.
SASTAV is responsible for static code analysis. The solution allows creation and editing of rules, assignment of different check sets to individual repositories, and management of scanning parameters. ARX ASPM PLATFORM acts as a unified center for managing AppSec tools. The platform collects results from various analyzers, correlates related findings, assesses risks, and displays the overall security posture of digital products.
Both solutions use artificial intelligence, but at different stages. In SASTAV, AI participates in defect verification, automatic triage, prioritization, and preparation of code change recommendations. This reduces the volume of raw warnings passed downstream. The AI assistant in ARX ASPM PLATFORM determines the statuses of defects found by the platform or imported from external systems.
After integration, a two-tier scheme emerges: SASTAV examines the code and filters findings, while ARX correlates them with results from other tools and helps decide which risks are acceptable. Developers expect to reduce manual operations, accelerate DevSecOps project connections, and lower the load on AppSec teams.


