Sigrid

The typical implementation process for Sigrid software involves several key steps and can vary in duration depending on the complexity and number of teams involved. Here is a detailed overview:

1. Technical Onboarding: This initial phase involves mapping your software portfolio visually in Sigrid and integrating the platform into your software development lifecycle. The technical onboarding is usually completed within 1 to 4 weeks.

2. Integration with Development Processes: Sigrid supports various development methodologies, including Agile and Scrum. It integrates seamlessly with your CI/CD pipeline, providing continuous feedback on code quality, security, and maintainability.

3. Setting Quality Objectives: During the onboarding, teams define quality objectives for non-functional aspects such as test code coverage and the state of open-source libraries. These objectives are monitored over time to ensure continuous improvement.

4. Continuous Monitoring and Feedback: Once integrated, Sigrid continuously monitors the software's health, providing insights into maintainability, security, architecture, and technical debt. This helps teams make informed decisions and prioritize critical initiatives.

5. Regular Updates and Support: Sigrid offers ongoing support and regular updates to ensure the platform remains aligned with the latest technologies and industry standards.

The overall implementation process is designed to be flexible and adaptable to the specific needs of each organization, ensuring a smooth transition and effective use of the platform.

Sigrid software can be customized to fit specific business needs. Here are some key points about its customization capabilities:

1. Configuration Files: Sigrid allows extensive customization through configuration files, specifically the Sigrid.yaml file. This file can be tailored to define custom components, exclude files, or adjust dependency settings as needed.

2. Scope Configuration: You can change Sigrid’s configuration for your project to make its feedback as useful and actionable as possible. This process, known as "scoping," involves setting up the analysis scope to focus on specific areas of interest.

3. Multi-Repo Support: Sigrid supports multi-repo systems, providing a unified architectural view across multiple projects or teams.

4. Custom Quality Objectives: During the onboarding process, teams can define quality objectives for non-functional aspects such as test code coverage and the state of open-source libraries. These objectives are monitored over time to ensure continuous improvement.

The additional costs associated with Sigrid software can include setup fees, maintenance, and support charges. Here are some details:

1. Setup Fees: The initial setup may involve costs related to technical onboarding and integration with your development processes. This phase typically takes 1 to 4 weeks.

2. Maintenance Costs: Ongoing maintenance costs can arise from continuous monitoring and updates to ensure the platform remains aligned with the latest technologies and industry standards.

3. Support Charges: Sigrid offers ongoing support, which may involve additional charges depending on the level of support required. This can include technical support, regular updates, and customization assistance.

4. Pricing Model: Sigrid's pricing is customized based on the specific needs and scale of the client's software projects. This means that potential users need to contact SIG directly to get detailed pricing information and possibly schedule a demo.

Sigrid offers comprehensive training and support to help new users get the most out of the platform:

1. SIG Academy: The SIG Academy provides focused training programs on software quality management in Sigrid and the SIG methodology for software quality analysis. These courses are designed to help users understand Sigrid from top to bottom, improving their software quality and coding skills.

2. Documentation: Sigrid offers extensive documentation that acts as a user guide, covering everything from getting started to advanced usage scenarios. This includes roles and usage, analysis scenarios, and integration with development processes.

3. Ask Me Anything (AMA) Sessions: Sigrid hosts AMA sessions where users can get a comprehensive understanding of the platform, discover tips and tricks, and troubleshoot any issues.

4. Customer Support: Sigrid provides ongoing support to help users with any technical issues or questions they may have. This includes assistance with setup, customization, and continuous monitoring.

Sigrid implements robust security measures to protect data:

1. Continuous Security Scanning: Sigrid continuously scans the software portfolio to uncover vulnerabilities in the source code and ranks risks by severity and impact. This helps in identifying and addressing potential security issues proactively.

2. AI-Powered Insights: The platform uses AI to provide detailed explanations and actionable mitigation advice tailored to each technology. This ensures that security measures are effective and up-to-date.

3. Customizable Security Goals: Sigrid allows organizations to set custom security objectives, ensuring that security efforts are aligned with business goals.

4. Multi-Standard Reporting: Sigrid supports multi-standard reporting capabilities, including OWASP, ISO, and CWE. This flexibility allows organizations to comply with various security standards and regulations.

5. Automatic Detection and Resolution: Sigrid uses a fingerprinting method to automatically detect and resolve security findings, reducing the amount of manual work required. This ensures that security issues are addressed promptly and efficiently.

6. Comprehensive Dashboards: Sigrid provides detailed portfolio and system-level insights through comprehensive dashboards, offering a complete overview of the security posture. This includes analysis of vulnerabilities, changes over time, severity ratings, and other key trends.

Sigrid releases updates regularly to ensure the platform remains aligned with the latest technologies and industry standards. Here are some key points about their update process:

1. Continuous Improvement: Sigrid is continuously enriched with smart software insights and code analysis models. This means that updates are rolled out frequently to incorporate new features, improvements, and security enhancements.

2. Managed Updates: Updates are managed seamlessly to minimize disruption. The platform ensures that new features and improvements are integrated smoothly into the existing system.

3. User Notifications: Users are typically notified about updates through the platform's interface and documentation. This helps them stay informed about new capabilities and changes.

Sigrid has clear policies regarding data ownership and portability to ensure client data is handled securely and responsibly:

1. Data Ownership: Clients retain full ownership of their data. Sigrid ensures that all client data remains under the control of the client, and no data is shared with external parties without explicit consent.

2. Data Portability: Sigrid supports data portability, allowing clients to export their data as needed. This ensures that clients can move their data to other systems or platforms if required.

3. Security Measures: To protect data, Sigrid implements robust security measures, including continuous security scanning, customizable security goals, and multi-standard reporting capabilities. These measures help safeguard client data against unauthorized access and breaches.

Sigrid offers flexible terms for scaling up or down to accommodate changing organizational needs:

1. Flexible Licensing: Sigrid provides flexible licensing options that allow organizations to adjust their usage based on their current needs. This means you can scale up to include more systems or users as your organization grows or scale down if your requirements decrease.

2. Customizable Scope: The platform supports customizable scoping, enabling you to define the analysis scope to focus on specific areas of interest. This flexibility ensures that you can tailor the platform's capabilities to match your evolving needs.

3. Support for Multi-Repo Systems: Sigrid supports multi-repo systems, providing a unified architectural view across multiple projects or teams. This feature is particularly useful for organizations with complex software landscapes.

The terms and conditions for contract renewal and cancellation for Sigrid are outlined in their Terms of Use and Confidentiality document:

1. Contract Renewal: Contracts are typically renewed automatically unless explicitly canceled by the client. The renewal terms are agreed upon in writing with SIG and are subject to the client's compliance with the applicable fees.

2. Cancellation: Clients can cancel their subscription by providing notice as specified in the contract. The cancellation terms include provisions for the termination of access to the Sigrid platform and the cessation of services.

3. Compliance with Fees: To maintain access to the Sigrid platform, clients must remain current on the applicable fees. Failure to do so may result in the suspension or termination of services.

Sigrid meets several globally recognized compliance standards to ensure high-quality software assurance:

1. ISO 25010: Sigrid's approach to software quality is based on the ISO 25010 standard for software product quality. This standard provides a comprehensive framework for evaluating software quality characteristics.

2. OWASP: Sigrid supports multi-standard reporting capabilities, including the OWASP (Open Web Application Security Project) standards, which focus on improving the security of software.

3. CWE: The platform also aligns with the Common Weakness Enumeration (CWE) standards, which provide a detailed list of software weaknesses and vulnerabilities.

4. TÜViT Certification: Sigrid's implementation of the ISO 25010 model has been certified by TÜViT, ensuring alignment with the standard and providing an additional layer of credibility.