Arnica + Azure DevOps

Excessive permissions risks identified down to the branch level and updated daily using behavior-based analysis. One-click mitigations are included with every risk.

Self-service permissions tooling allows developers to request access from Slack or Microsoft Teams. Automatically grant permissions or notify relevant approvers based on policies.

Instantly view branches with policies that are currently unenforceable and enforce status checks with a single click Mitigation directly with Arnica.

Route mitigation recommendations privately to the developer when code is pushed and scanned. Pull request annotations are supported at the time of code review for unresolved vulnerabilities at the feature branch level. Block vulnerable code with merge blocking on high importance projects.

Identify vulnerabilities in source code at the time of code push and provide tailored mitigation recommendations based on the risk and its context.

Identify vulnerabilities in infrastructure as code as part of a code push such as terraform, cloud formation, helm charts, and more.

Identify third party package vulnerabilities and recommend the best version to use in your source code such as which version will have the biggest impact with the lowest version change. Flag inadequate licenses and manage risk SLAs.

Every secret. Every time. Validated and confirmed before it is reported, with details such as pusher, secret type, and more included in the finding.

Secrets are found in real-time. Prompt developers to act or leverage a “Zero New Secrets” policy to automatically mitigate the secret instantly without leaving a trail in git history.

Full historical visibility into who has a copy of each identified secret, when and how they got it.