What OpenRefactory is
OpenRefactory has an amazingly robust SAST scanner that has really focused on building the best detections possible. While they're still building their full SaaS platform and features, the SAST engine itself is one of the best out there. The vendor site is www.openrefactory.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What OpenRefactory covers
OpenRefactory is in the catalog for these capabilities. Categories: SAST. Catalog tags: Nerdy.
How to evaluate OpenRefactory in a security program
Use OpenRefactory as a stack candidate, not as diligence evidence. The oneNorma score for OpenRefactory is 3.3/10 (percentile 4). If the real gap is in SAST, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.openrefactory.com publishes. Contrast it with pentesting and Security Cloud & Compliance.
