I've used this software for about a year, the clients love it because the dashboard delivered by CAST contains critical informations for the developers and the architects of the application from CAST dashboard they can know which modules and which lines of code have to be changed in their application to improve its quality.

They are many great things about this tool: -The quality of the dashboard delivered by CAST in the end of each code analysis -The diversity of the coding languages that CAST can analyse -CAST analyses code based on 5 factors: robustness, efficiency, security, changeability and transferability so it is ideal to estimate priority, complexity and risks -CAST contains action plans for next runs if they are many versions of the application -In general, the support team is good and responds quickly to the incidents

-CAST is very complex for new users so new users definitely need a training to be able to use it -This software is very expensive so it is only used by very big companies

SaaS based implementation, static code analysis, open source libraries licensing checks, security vulnerabilities scanning

Dashboards can be further improved. Public API's need lot of improvement to make it easy to integrate with on-prem DevSecOps tools.

CAST Highlight easily identifies common vulnerabilities in the code and alerts when to license terms are not according to our governance and usage policies. It also ensures compliance to privacy regulations.

CAST Highlight ensures that the open source and third party software that we integrate to our applications are secured and the usage licenses are according to our policies.

Scans takes lot of time complete. figuring out the best structure for code base is time consumimg