Consulting & DevSecOps
AppSec Tooling Consulting
Selection, deployment, configuration and tuning of application security tools.
Aligning tools to the client’s risk context: custom rules, false-positive reduction and tuning for useful signal. Tools: Fortify, Checkmarx, Snyk, Semgrep.
Deliverables
- Tool recommendation/comparison
- Configuration and custom rules
- False-positive reduction plan