{"id":"Black Duck Polaris","name":"Polaris","provider":"Black Duck","providerSlug":"black-duck","status":"FedRAMP 20x package published","impact":"Not yet listed","authType":"Program","serviceModel":["SaaS"],"deployment":"Public Cloud","businessFunctions":[],"smallBusiness":false,"website":"https://www.blackduck.com/platform.html","description":"Polaris is a software-as-a-service application security platform providing static application security testing (SAST), software composition analysis (SCA), AI capabilities, issue and component management, reporting and dashboards, and integration with source code management systems, bug tracking systems, and IDEs. It supports importing findings from third-party application security tools. Dynamic application security testing (DAST) is excluded from the initial authorization scope.","logo":"https://www.blackduck.com/content/dam/black-duck/style-guide/header/BlackDuckLogo.svg","inMarketplace":false,"agencies":[],"reuseCount":0,"leverages":[],"leveragedBy":[],"cr26":{"type":"20x","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no UEI number; include it if you have one","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no FedRAMP Recognized assessor listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}]},"timeline":[],"trustCenterCheck":null}