Schedule a consultation

Consultation calls provide you the opportunity to get assistance with configuring and running a scan or with interpreting the findings in your application. During scan configuration calls, Veracode can answer specific questions you have about your scan configuration or walk you through the best practices for setting up your scan. During scan results calls, Veracode can help you understand the significance of the findings and provide guidance on remediation and mitigation actions.

Before you begin:

To enable consultation calls, you must meet the following requirements:

• You have an Enhanced Support subscription. If you have not purchased a subscription, contact Veracode Technical Support for more information about the support options.

• You have the necessary Veracode Platform role:

  • Scan configuration calls require the Creator, Security Lead, or Submitter role.
  • Scan results calls for policy scans require the Executive, Reviewer, or Security Lead role.
  • Scan results calls for sandbox scans require the Sandbox User role.

• For scan results calls, you have results available.

If you have a scan configuration call scheduled, you cannot schedule any additional consultations for your application.

You can have one scan results call scheduled at a time for policy scans in addition to one for each sandbox.

note

To be included on all consultation calls for your organization, contact your Veracode account manager.

To complete this task:

1. Go to the appropriate page in the Veracode Platform.

   • For calls concerning scan configuration, go to the application overview page.
   • For calls concerning scan results of policy scans, go to the application overview page, the Results page, or the Triage Flaws page of the latest results for the application.
   • For calls concerning scan results of sandbox scans, go to the Sandbox Results page.

2. Select Schedule a Consultation to open the schedule window.

3. Select the type of assistance you need.

   • Understanding how to configure and run a scan
   • Understanding my scan results
   note

   While a scan is being promoted from sandbox to policy, the Understanding my scan results option is turned off. This option is available when the scan finishes promotion to policy.

   Even if you have sandbox results, you can discuss only policy scan results in scan results calls scheduled from the Application page.

4. Select the type of consultation:

   • Specific Questions
   • General Walkthrough

5. Select the scan type you want to review.

6. If you select Specific Questions, select any of the options that apply to your questions, and enter details in the free-text fields.

7. Select Next.

8. In Your Details, enter your name, select your timezone, and enter your email address.

9. In Additional Call Attendees, add the email address for all the other people attending the consultation. There is no limit to the number of attendees you can invite.

10. Select Next.

11. Select the date and time in which you want to have the consultation.

12. To schedule the consultation, select Schedule. If you schedule a Manual Penetration Testing consultation, you are prompted to provide three possible times when you can receive the consultation call.

note

If you need to cancel a consultation, please cancel it in the Veracode Platform or by contacting Veracode Technical Support at least 24 hours in advance. Declining the meeting invite does not cancel the meeting. If you do not cancel a scheduled consultation call at least 24 hours before the scheduled time, you incur a deduction of up to 2 hours of support or service hours from your account.

Schedule a next-day consultation

You can schedule a consultation for the following day if you have a next-day consultation subscription. A consultation call with Veracode can help answer specific questions you have about your scan results, help you understand the significance of the findings, and provide guidance on remediation and mitigations.

Before you begin:

To enable next-day consultation calls, you must meet these requirements:

• You have a next-day consultation subscription.
• Next-day consultations are allowed in your application profile.
• You have scan results.
• You have the necessary Veracode Platform role:
  • Calls for policy scans require the Executive, Reviewer, or Security Lead role.
  • Calls for sandbox scans require the Sandbox User role.

To complete this task:

1. In the Veracode Platform, go to the Results page for the most recent scan of your application.
2. Select Schedule a Consultation. A window opens where you can enter details about the call.
3. Select the Show Next-Day Consultations checkbox, if available. Under the checkbox, you can view the number of next-day consultation calls available to you this month. If you have no next-day consultations this month, or you do not want to use a next-day consultation, do not select the Show Next-Day Consultations checkbox. Standard scheduling options are available for two business days from the date of the request.
4. Select Next.
5. Select a time for the call. If the time slot is grayed out, that time is unavailable.
6. Select Schedule.