Skip to main content

I hope I'm in a good sub for this... I'm trying to find a static code analyzer for visual cobol that can scan against PCI security regulations. Has anyone run into this? The best option I've found so far would be Yasca, but I would have to define my own rule-set and I just don't know enough about cobol or PCI to do that. https://nox.tips/

I hope I'm in a good sub for this... I'm trying to find a static code analyzer for visual cobol that can scan against PCI security regulations. Has anyone run into this? The best option I've found so far would be Yasca, but I would have to define my own rule-set and I just don't know enough about cobol or PCI to do that. https://nox.tips/

Hi Adienmakram,

We recently introduced support for security code scanning of Visual COBOL code in our flag ship security product, Micro Focus Fortify.

It is an industry leading security scanning product and we have embedded some of the Visual COBOL and COBOL Analyzer technology so it'll support Visual COBOL (and Mainframe) code.

It supports both SaaS and on-premise deployments.

More info: https://www.microfocus.com/en-us/cyberres/application-security

Thanks,

Guy Sofer

Product Manager