> For the complete documentation index, see [llms.txt](https://docs.prismacloud.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.prismacloud.io/content-collections/application-security/get-started/application-security-settings.md).

# Application Security Settings

Application Security Settings involves a comprehensive set of practices and tools aimed at ensuring the security of applications throughout their development lifecycle. This includes various components such as IaC Security, Software Composition Analysis (SCA), Secrets Security, and CI/CD Security.

| **What do you want to do?**                                                                                                                                                                                                                                                                                                                                                                                                                                       | **Start here**                                                                                                                                                                                                               |
| ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| <p>Enable Application Security Subscriptions</p><p>Application Security has four license types billed by developer credits. Learn more on the a la carte license offerings for Application Security.</p>                                                                                                                                                                                                                                                          | [Application Security License Types](/content-collections/application-security/get-started/application-security-license-types.md)                                                                                            |
| <p>Enable Notifications</p><p>Enhance Code and CI/CD Security by enabling notifications for external integrations like JIRA, ServiceNow, Microsoft Teams, Slack, Splunk, and Webhook.</p>                                                                                                                                                                                                                                                                         | [Enable Notifications for Code Security and CI/CD Security](/content-collections/application-security/get-started/application-security-settings/enable-notifications.md)                                                     |
| <p>Exclude Paths</p><p>Define paths to exclude for scans and specify repositories for targeted applications. This helps in noise reduction and effective prioritization of issues.</p>                                                                                                                                                                                                                                                                            | [Exclude Paths](/content-collections/application-security/get-started/application-security-settings/exclude-paths.md)                                                                                                        |
| <p>Validate Secrets</p><p>Prima Cloud leverages service provider APIs to verify the authenticity and integrity of secrets discovered within the codebase. This process serves as a crucial step in prioritizing security measures. By confirming the validity of these secrets, you can allocate resources and attention to the most pressing security concerns, ensuring a focused and effective approach to safeguarding sensitive information.</p>             | [Validate Secrets](https://github.com/PaloAltoNetworks/pc-docs-md/tree/main/enterprise-edition/content-collections/application-security/risk-management/monitor-and-manage-code-build/secrets-scanning.xml#validate-secrets) |
| <p>Scan Git History for Secrets</p><p>Deleting a secret from a repository does not completely remove its exposure as it can still be found in the git history of the repository. Enabling Git History scanning empowers you to uncover any secrets that may have been removed from the repository but remain accessible in its history. This ensures a comprehensive security sweep for vulnerabilities in potentially forgotten or overlooked access points.</p> | [Secrets Scanning](/content-collections/application-security/risk-management/monitor-and-manage-code-build/secrets-scanning.md)                                                                                              |

In addition to these configurations you can enable **Developer Suppressions**. By enabling this configuration, any suppressions specified in the code will be disregarded while a routine and thorough scan of associated resources will continue. This ensures that no potential issues or vulnerabilities are overlooked, bolstering the overall security posture of the system.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.prismacloud.io/content-collections/application-security/get-started/application-security-settings.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.