Discussions
Categories
- 196.7K All Categories
- 2.2K Data
- 235 Big Data Appliance
- 1.9K Data Science
- 449.8K Databases
- 221.5K General Database Discussions
- 3.8K Java and JavaScript in the Database
- 31 Multilingual Engine
- 549 MySQL Community Space
- 477 NoSQL Database
- 7.9K Oracle Database Express Edition (XE)
- 3K ORDS, SODA & JSON in the Database
- 532 SQLcl
- 4K SQL Developer Data Modeler
- 186.8K SQL & PL/SQL
- 21.3K SQL Developer
- 295.4K Development
- 17 Developer Projects
- 138 Programming Languages
- 292.1K Development Tools
- 104 DevOps
- 3.1K QA/Testing
- 645.9K Java
- 28 Java Learning Subscription
- 37K Database Connectivity
- 153 Java Community Process
- 105 Java 25
- 22.1K Java APIs
- 138.1K Java Development Tools
- 165.3K Java EE (Java Enterprise Edition)
- 17 Java Essentials
- 158 Java 8 Questions
- 85.9K Java Programming
- 79 Java Puzzle Ball
- 65.1K New To Java
- 1.7K Training / Learning / Certification
- 13.8K Java HotSpot Virtual Machine
- 94.2K Java SE
- 13.8K Java Security
- 203 Java User Groups
- 24 JavaScript - Nashorn
- Programs
- 394 LiveLabs
- 37 Workshops
- 10.2K Software
- 6.7K Berkeley DB Family
- 3.5K JHeadstart
- 5.6K Other Languages
- 2.3K Chinese
- 170 Deutsche Oracle Community
- 1.1K Español
- 1.9K Japanese
- 230 Portuguese
Open Source Java Code Vulnerability Tool

VladK
Member Posts: 68 Blue Ribbon
Hello,
We are looking for a product that would scan our Java application and identify all known published open-source code vulnerabilities.
I found one such tool, and we are in the process of evaluating it:
Sonatype Application Health Check
http://www.sonatype.com/Products/Application-Health-Check
Another more expensive product is HP Fortify
http://www8.hp.com/us/en/software-solutions/software.html?compURI=1337262
I wanted to reach out to the community to see if anyone has used any such product.
Thanks,
Vlad
We are looking for a product that would scan our Java application and identify all known published open-source code vulnerabilities.
I found one such tool, and we are in the process of evaluating it:
Sonatype Application Health Check
http://www.sonatype.com/Products/Application-Health-Check
Another more expensive product is HP Fortify
http://www8.hp.com/us/en/software-solutions/software.html?compURI=1337262
I wanted to reach out to the community to see if anyone has used any such product.
Thanks,
Vlad
This discussion has been closed.