ScanCentral Overview (2020)

Learn about Fortify's ScanCentral feature for application security in a CI/CD pipeline.
Fortify ScanCentral allows a DevOps user to lighten the impact that static analysis tools have on the build server while providing a simple-to-use interface that abstracts any technical complexity of Fortify SCA (Static Code Analyzer). ScanCentral runs through the Fortify Software Security Center (SSC) platform.
Additionally, it provides a scalable static analysis farm that can be dynamically scaled up or down to meet the changing demands of the CI/CD pipeline.
• Integrates with popular build tools like Maven / Gradle / MSBuild.
• Automatically provides the optimal settings based on the build configuration.
• Isolate translation / analysis phases on dedicated scan agents.
• No load on the build server except for lightweight packaging.
LEARN MORE about Fortify: www.microfocus.com/en-us/solu...
LEARN MORE about how Micro Focus was named a leader in the Gartner MQ for Application Security Testing: software.microfocus.com/en-us...
LEARN MORE about how Fortify received the highest score in the Gartner Critical Capabilities for Application Security Testing report for the Enterprise use case AND the Mobile and Client use case: www.microfocus.com/en-us/asse...
SUBSCRIBE TO FORTIFY UNPLUGGED: / @fortifyunplugged
CONNECT with the Fortify Online Community: community.microfocus.com/t5/F...
- Connect with peers and share your knowledge
- Find solutions and answers to your technical questions
- Stay informed on new releases and product enhancements
- Access downloads, demos, videos and support tips

[@wangpohpeng75]

Can we just use the ScanCentral clients as pure scanners without a sensor?

[@FortifyUnplugged]

There is an option in WebInspect to create a trial license automatically, but we are planning on removing that in the 23.1 release.