Cast Highlight delivers valuable insight into your application software
Pros
- Identifies common coding vulnerabilities.
- Compares code to industry best practices.
- Assesses the code for data privacy compliance.
Cons
- Code scans could be faster. A large application may need to be broken down into smaller sub-applications in order to facilitate faster code scans.
- We spent a lot of time trying to figure out how to best structure our code base in the application for ultimate performance.
Return on Investment
- I believe once we had the tool working for our code base, we immediately saw positive ROI.
- We spent some time getting to where our code code be scanned efficiently but some of that was trying to do things ourselves instead of fully utilizing Cast Professional Services. I highly recommend to do an engagement with CAST to have them help setup the tool in your environment or to run it in the cloud for you.
Alternatives Considered
Fortify on Demand (formerly HP Fortify on Demand) and Black Duck
Other Software Used
MongoDB, MongoDB Atlas
