Static analysis tool supporting Delphi for CASA Tier 2 assessment?

[patmandin 0]

Hello,

 

We have an application (of course written in Delphi) using Gmail API, and now Google requires us to have at least a Tier 2 CASA assessment.

I would like to know, for anyone who passed this, which assessor did you use, and which static analysis tool was used.

The tools I see publicly listed do not seem to support Pascal, mostly Web languages (PHP, Ruby, etc), .NET, VB, etc

 

Edit: CASA site

https://appdefensealliance.dev/casa

Edited May 21, 2024 by patmandin

[Jim McKeeth 107]

The only security scanner I know about for Delphi is DerScanner but they don't appear to be CASA certified. 

 

The official list says they've paused onboarding new labs, so that might be why.