What Synopsys is
Does Synopsys technically do everything you'd need from an ASPM? Yes. Would you ever want to use it? No. They've focused heavily into the semiconductor industry, and their ASPM is heavily patched together from various acquisitions. The vendor site is www.synopsys.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Synopsys covers
Synopsys is in the catalog for these capabilities. Categories: ASPM, DAST, SAST, and SCA. Catalog tags: Open Source.
How to evaluate Synopsys in a security program
Use Synopsys as a stack candidate, not as diligence evidence. The oneNorma score for Synopsys is 4/10 (percentile 15). If the real gap is in ASPM, DAST, SAST, and SCA, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.synopsys.com publishes. Contrast it with pentesting and Security Cloud & Compliance.
