About Internal Scanning Management (ISM)
Veracode Internal Scanning Management (ISM) is a simplified approach to scanning web applications or API endpoints hosted within a corporate firewall that cannot be reached from the public internet. ISM allows Veracode to bring uniformity to the scanning of external and internal applications or API endpoints for Veracode Dynamic Analysis users.
ISM is specifically designed to not expose you to any security risks. All scanning and support occur in the Veracode cloud and you can disable access between Veracode and your applications or APIs at any time. The only software you need to install in your network is a simple Java client that authenticates with a gateway in the Veracode cloud.
ISM provides several benefits when scanning your internal applications, such as:
Usability
- You can configure your ISM project within a single, simple workflow.
- You can configure Dynamic Analysis scans for your internal applications and REST APIs in the same way that you do for external ones.
- ISM does not restrict where you can host your internal applications or APIs. With ISM, you can perform scans of applications and REST APIs hosted in containers, virtual machines, bare-metal servers, or in the cloud.
Compliance
- With ISM, you have full control of your environment. You can grant and revoke Veracode access to scan or provide support for your applications or REST APIs.
- The only software you need to maintain is a JAR file that you run in your environment.
Stability
ISM does not require you to regularly update any software, eliminating the need for reboots and extensive downtime.
Scalability
You can run several scans simultaneously on a single ISM deployment.
Patching
ISM uses AWS Patch Manager to automatically patch your Amazon EC2 instances. There is a maintenance window for applying patches every Tuesday at 7:00 AM Coordinated Universal Time (UTC).