Question Relating to Aspose Security Practices

Aspose.Cells Product Family
1

Hi there,

We’re currently evaluating Aspose.Cells for Java and as a next step before purchasing our Security team has a few questions that I was hoping someone could answer!

  • What dependencies are baked into Aspose.cells for Java? Has all the code been written in house, or does it rely on other 3rd party libraries or services?
  • Does the code for Aspose call anything externally? If so, does this change by plan type?
  • As apart of Aspose’ own security review process - Does Aspose perform static application security testing?

Thanks in advance!

2

@crussell.vena

Now Aspose.Cells for Java only depends on BouncyCastle 3rd party libraries. Please note, these libraries are used for two processes/features: applying AES encryption for Excel files and setting digital signatures of VBA project.

No.

We use SonarQube to perform static application security testing.

3

Much appreciated @simon.zhao, This answers my questions for now - Thanks!

4

@crussell.vena,

You are welcome. Should you have further queries or comments, feel free to write us back, we will be happy to assist you soon.