What is most valuable?
In a customer environment, developers integrate their code with CI/CD pipelines. Most developers use cloud platforms like AWS or Azure and project management tools. FortiDevSec integrates with these CI/CD pipelines using agents such as YAML files. Once integrated, FortiDevSec scans the source code using our product or within the IDE.
The most valuable feature is the ability to identify known vulnerabilities in applications by generating reports easily. This development gamification is very useful for developers. Compared to TechSmart and Fortify, FortiDevSec has similar features, but it is much easier to use because of its simple setup. SysTrack, for example, is not very simple.
For the CI/CD pipeline, we only need to integrate a YAML file into the security process. Compared to other products, the tool requires fewer steps. We must integrate one file with the CI/CD pipeline, automatically pulling the code report to the repository. Using our API and username, it is easy to scan the environment.
The tool's integration is also easy.
What needs improvement?
The only drawback I see with FortiDevSec is the lack of extensions.
For how long have I used the solution?
I have been using the product for five months.
What do I think about the stability of the solution?
We haven't faced any performance issues.
What do I think about the scalability of the solution?
Based on management, there are 20-30 developers in the company. Developers use most of the CI/CD functionality. I think more than four to five people are using this product.
How are customer service and support?
We have resolved the issues ourselves.
How was the initial setup?
The solution is completely easy to set up in our environment. We must purchase the product, get the approval license, and integrate it. FortiDevSec is cloud-based, not on-prem, making it straightforward to integrate and use. It doesn't require maintenance and can be deployed in a few hours.
What other advice do I have?
We have implemented FortiDevSec for one customer for a year. It has been implemented successfully, and we haven't received any complaints from them. Since it's been used by only one customer, if we manage the product for multiple customers, we might be able to identify any potential problems. But until now, I can't say there are any issues.
I would recommend it since it's user-friendly. I rate the overall product a nine out of ten.
