Skip to main content
Inspiring
Sep 23, 2025 2:13 PM UTC
Question

SAST tool recommendations for .cfm or .cfc files

Hello,

 

We have been using SonarQube for code quality testing of our applications. However, I was wondering what would be the recommended one for ColdFusion files. I know that SonarQube officially doesn't support .cfm or .cfc files(although there is some third party plugin). So, wondering what  industry standard tools are being used to scan our custom ColdFusion files.

 

Thanks,

Manoj.

    2 replies

    BKBK
    Community Expert
    Community Expert
    Sep 23, 2025 3:17 PM UTC

    I would recommend Foundeo's products and services. Foundeo's founder, Pete Freitag, is currently the biggest name in CFML security.

    Translate
    Inspiring
    Sep 23, 2025 3:26 PM UTC

    great thanks. we have been using Fuseguard from Foundeo.  so, I'm aware of the company.

    Translate