SOOS - Software security, simplified.

SOOS is the easy-to-integrate software security solution for your whole team. Identify and fix vulnerable dependencies or license issues with SOOS SCA (Software Composition Analysis) or use SOOS DAST (Dynamic Application Security Testing) to run our no limit vulnerability scanner against your web apps or APIs.

Overview

This task allows you to run SCA and DAST scans against your code from within your Azure Pipelines.
To get started, you will need a SOOS account. A free 30-day trial is included.

Getting Started

To start scanning, follow the integration guide for either SCA or DAST.

SOOS Core SCA Features

• Identify vulnerable dependencies within your project manifests (Node, Ruby, Python, Java, .Net, and more)
• Robust license and governance policies
• Support for Jira and GitHub issue management
• SBOM generation in multiple formats
• Full scan history

SOOS DAST Features

• All of the features included with SOOS Core SCA
• Scan web apps and APIs (OpenAPI, GraphQL, and SOAP) for vulnerabilities
• No limits on the number of domains
• No limits on concurrent scans
• Unified dashboard with SOOS Core SCA

Support

For assistance, please check our knowledge base or contact support.