What is the Secure Code Warrior® Trust Agent?

SCW Trust Agent brings together insights and controls around developer security competencies and code commits. It looks at the metadata for every commit that hits your repositories identifying the language, submitting developer, and time of the commit, aligning this data with insights from the SCW Agile Learning Platform to determine if that developer has sufficient security knowledge and skills in that specific programming language.

This information can be utilized to configure customizable competency requirements for commits across your repository, being more or less restrictive based on the overall sensitivity of the repository or project.

Together these insights and controls:

• Strengthen your overall security posture - Ensuring developers are knowledgeable and skilled in the security implications in the specific languages that they commit.
• Improve the efficiency of your development lifecycle - Reducing disparate security review cycles and remediation of preventable vulnerabilities.
• Scale Developer-Driven Security - Empowering developers with the knowledge to secure their code from the outset.