NIMBUSOURCE LTD

Diffblue Cover

Diffblue cover automatically writes unit tests for Java and Kotlin applications using reinforcement learning. Its key differentiator is that it can work completely autonomously, writing thousands of correct unit tests.

Features

• Java and Kotlin unit test writing
• Fully autonomous operation using reinforcement learning
• Code coverage dashboard and reporting
• IntelliJ IDE plug-in and Command Line versions
• Linux, Windows and macOS support
• Automatically updates unit test suite as code evolves

Benefits

• Get strong unit test coverage in hours
• Ship higher quality software, faster
• Reduce cost, risk and time of cloud migrations
• Reduce cost, risk and time of refactoring projects
• Dramatically reduce the time required to meet coverage targets
• Improve DORA metrics

£25,000.00 a licence a year

• Free trial available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at Fl@nimbusource.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

744385537887429

Contact

Francesca Lodge
07539440876
Fl@nimbusource.com

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud
• Service constraints: Linux, Windows and macOS operating systems. Java 8 to 21.
• System requirements: Java 8 to 21

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Maximum 1 business day
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: No
• Web chat support: Web chat
• Web chat support availability: 9 to 5 (UK time), 7 days a week
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: Via Slack channel
• Web chat accessibility testing: Accessibility that Slack provides only
• Onsite support: Yes, at extra cost
• Support levels: Teams: Email and Web support only; Enterprise: Email and web support, dedicated Diffblue support contact
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Diffblue offers a JumpStart service to onboard customers.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Not applicable -- service does not retain user data.
• End-of-contract process: At the end of the contract, the product will cease to operate. All unit test code generated remains yours, with the only restriction being that you may not use it for the purposes of training any machine learning model.

Using the service

• Web browser interface: No
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: None or don’t know
• API: No
• Customisation available: Yes
• Description of customisation: Cover can be tuned for your Java environment and dependencies. You can customise the synthetic data generation capability of the product to use your data.

Scaling

• Independence of resources: Each instance is independent

Analytics

• Service usage metrics: Yes
• Metrics types: Cover Reports is a dashboard for unit test coverage.
• Reporting types: Reports on request

Resellers

• Supplier type: Reseller (no extras)
• Organisation whose services are being resold: Diffblue Ltd

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • Other locations
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Encryption of all physical media
• Data sanitisation process: No
• Equipment disposal approach: In-house destruction process

Data importing and exporting

• Data export approach: By storing the generated unit tests in their source code control system.
• Data export formats: Other
• Other data export formats: Source code files
• Data import formats: Other
• Other data import formats: Source code files

Data-in-transit protection

• Data protection between buyer and supplier networks: Other
• Other protection between networks: Diffblue has no access to your VM running the product.
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: The product runs as a VM on 3rd party cloud services -- the SLA is provided by the cloud provider.
• Approach to resilience: The product runs as a VM on 3rd party cloud services -- the SLA is provided by the cloud provider.
• Outage reporting: A public dashboard is provided for all Diffblue services including licensing API, licensing portal, website and documentation.

Identity and authentication

• User authentication needed: Yes
• User authentication: Other
• Other user authentication: The product runs in a VM on your cloud instance, and the user defines the level of authentication security requited for its VMs.
• Access restrictions in management interfaces and support channels: Diffblue has no access to your VMs or other data. Support data is provided to Diffblue at your discretion and is stored securely and deleted within 90 days if you cease to be a subscriber.
• Access restriction testing frequency: At least every 6 months
• Management access authentication: Other
• Description of management access authentication: Diffblue has no management access to your VM.

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: Diffblue has a written security policy that is signed off by the CEO and executive management, which is reviewed and updated at least once a year.
• Information security policies and processes: Diffblue has a written security policy that is enforced by a variety of physical and logical controls, plus reporting, plus 6-monthly penetration testing.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: There is a Diffblue policy for secure software development that is checked via scanning and reporting. All software is stored in source code control systems and all releases are scanned for security vulnerabilities prior to release.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: In addition to Diffblue secure code development practices that are enforced by scans, all releases are scanned for vulnerabilities and remediated prior to release. Any vulnerabilities subsequently found are addressed by a "hot patch" release that is provided to all customers.; ; We utilize leading 3rd party specialist vulnerability scanning tools that are widely used in the industry.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Diffblue can provide a copy of its security policy and response process and timelines upon request.
• Incident management type: Supplier-defined controls
• Incident management approach: Diffblue has a pre-defined process for triaging and responding to security incidents with defined escalation. Users can report incidents via the support system. Anyone can report a problem via a public security email address. Diffblue provides post-mortem reports on its website.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  Tackling economic inequality

  Tackling economic inequality

  Diffblue Cover is a new disruptive AI-based technology, delivering lower cost of software development while increasing the quality of the software delivered.; ; It helps users modernise their software development practices quickly and at lower cost. ; ; Cover's CI optimization features typically result in a 50% decrease in computing resources required for frequently-run CI jobs, reducing greenhouse gas emissions.

Pricing

• Price: £25,000.00 a licence a year
• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: You can get a free 14-day trial on the Diffblue website. You get both the plug-in and CLI versions of Cover and can write 1000 tests/week.
• Link to free trial: https://www.diffblue.com/try-cover/

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at Fl@nimbusource.com. Tell them what format you need. It will help if you say what assistive technology you use.