CAST Highlight
Rapid application portfolio analysis
Automated source code analysis of hundreds of applications in a week for Cloud Readiness, Open Source risks, Resiliency, Agility. Objective software insights combined with qualitative surveys for business context.
Easily identify risks and opportunities for investment, rationalization, Cloud migration, and improvement.
Based on facts.
Cloud Readiness Assessment
Automatically Segment App Portfolios for Cloud Migration
Automatically build an objective migration roadmap across an entire application portfolio in seconds using the Portfolio Advisor for Cloud. Segment and prioritize each application into categories such as Rehost, Refactor, Rearchitect, Rebuild, or Retire.
Visualize Inter-App Dependencies
Visualize application to application dependencies to uncover inter-application linkages that could break during a migration and avoid issues before a migration.
Cloud ready effort estimation
Automatically generated, customizable estimates assess the effort required to make changes when moving to cloud PaaS.
Pinpoint Cloud Migration Blockers
Automatically identify if patterns blocking migration to cloud are used (e.g., COM components or use of persistent files). Get accurate guidance where and how to remediate such blockers.
Leverage Cloud Migration Boosters
Automatically identify if patterns that make cloud migration easier are used (e.g., web configuration files or MySQL) to find opportunities for faster migration.
Cloud Service Recommendations
Identify specific cloud platform services that are good candidates for an application to utilize once migrated to the cloud for Azure and AWS.
Accelerate Cloud Containerization
Automatically discover specific source code patterns that prevent adoption of containers and get precise recommendations on how to remove these container blockers.
Software Composition Analysis
Open Source Safety score
Automatically detect all open source frameworks and 3rd party components from a proprietary knowledgebase of 90 million+ components. Use the unique Open Source Safety score to prioritize remediation efforts across entire portfolios and focus on the most business critical applications first.
Detect Common Vulnerabilities & Exposures
Automatically identify all CVEs that pose security risks at the portfolio and application levels. Analyze severity and business impact to prioritize remediation efforts and act on the most critical threats first.
Detect Common Weakness Enumerations
Expand security risk insight coverage by identifying CWEs that represent possible future vulnerabilities that have not yet been reported officially as CVEs. Automatically detect CWEs via CAST’s exclusive Open Source Software Intelligence Database (OSSIDB) and structural code quality technology that analyzes the most popular OSS components.
Reduce legal risks
Detect all licenses in use across components at the portfolio and application levels to identify possible legal issues. Customize the license profile policy to meet specific needs of the organization.
Prevent technology obsolescence
Instantly detect which applications use obsolete component versions that require upgrades and get recommendations on safer versions to use.
Uncover hidden risks
Detect open source vulnerability and license risks buried in dependent components that your open source components use. Get insights on how to remove these harder to find threats.
OSS Dependency Explorer
Analyze complex applications that use numerous components more easily using data visualization. Explore and filter open source risks, dependencies, and priorities especially when analyzing hundreds or thousands of components.
Software Health Insights
Software Resiliency
Make software more robust and reliable with insight into which code patterns are likely to cause production issues and recommendations on how to improve them.
Software Agility
Make software changes faster with insight into which code patterns make applications harder to maintain and recommendations on how to improve them.
Software Elegance
Make software less complex and reduce technical debt with insight into which code patterns are likely to create long-term resiliency risks and recommendations on how to improve them.
Prioritize Business Critical Apps
Capture qualitative information using the survey feature that is mapped to code analysis data for more contextual insights. For example, utilize the business impact of each application to help prioritize decisions across entire portfolios.
Optimize Maintenance Costs
Automatically identify where and why you should increase or decrease your maintenance effort based on code metrics and COCOMO II (latest industry-standard cost estimation model for software development projects).
Identify risky coding practices
Automatically detect hundreds of problematic code patterns and programming practices that reduce health and increase cost. Resiliency, Agility, Elegance metrics give you the facts about your portfolio along with specific recommendations on improvement.
Private Data Detection
Scan apps for manipulation of sensitive data
Reduce compliance risk with GDPR, CCPA, or other similar regulations by analyzing applications for specific keyword patterns such as manipulation of PII. Start with an out of the box keyword template or customize it with tailored patterns.
Score each app by PII density and weighting
Quickly identify which application files contain your customized keywords. Configure custom scoring to prioritize the most sensitive data first.
Drill down analysis
Start at the portfolio level to identify apps or groups of apps that pose compliance risks. Drill down to specific apps to identify the specific sensitive data patterns that need to be investigated further for compliance.
Effortless On-boarding
Onboarding apps takes only minutes: scan code locally, answer a short web-based survey – results are available instantly.
Local Code Scan
Source code doesn’t leave the premises. Scan apps locally, then upload metrics. Or automate the process via a CLI. See how it works.
40+ Technologies
Supported programming languages: Java, Javascript, Python, JSP, COBOL, SAP/Abap, C/C++, C#, PHP, Visual Basic, T-SQL, PL/SQL, Shell…
Application Benchmark
Benchmark against 3000+ applications comparing metrics using more than a dozen dimensions (e.g. technology, app type, etc.)
Trends
Track progress over time to understand if health, cloud readiness, and open source safety is improving across the portfolio and for each application.
Custom Surveys
Customizable surveys enable more contextualized analysis by enhancing technical code analysis insights with qualitative data.
Custom Indicators & Dashboards
Define custom calculations and reporting to develop tailored views.
Standard Format Exports
Export results in PowerPoint, Excel, and XML for local analysis or integration into other tools.
CI/CD Connection
Connect with CI/CD pipelines through a configurable command line. Get fresh analytics after each sprint or release.
Public Rest API
Key metrics can be extracted and integrated with other systems such as EA, APM, or PPM tools, using the public REST API.
Role-Based Dashboards
Enroll users with different profiles and associated visibility: Portfolio Managers, Contributors and Viewers.
Azure DevOps and Jira Extensions
Turnkey extensions are available for Azure DevOps and Jira to automate code scanning and automatically create projects based on software intelligence.
What Our Clients Experienced
"We needed a turn-key solution that would provide us with actionable indicators across our portfolio."
Pascal Bernal
CIO
"Application cloud readiness assessments went from 3+ weeks down to 3 days with the same accuracy."
Jeremy Woo-Sam
Azure Blackbelts Lead
"CAST accelerates the assessment & analysis phases of app modernization by up to 30X."
Sunil Agrawal
Chief Architect
