> For the complete documentation index, see [llms.txt](https://docs.arnica.io/arnica-documentation/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.arnica.io/arnica-documentation/readme.md).

# Introduction

Set up Arnica, connect your source code, and manage code risks and secrets across your development ecosystem.

Arnica is an application security posture management (ASPM) platform. It finds and helps fix risks across your source code and development ecosystem: code vulnerabilities (SAST), open source dependencies and licenses (SCA), infrastructure as code (IaC), hardcoded secrets, and excessive access to source code. Findings reach developers where they work, in pull requests, chat and ticketing tools.

## Start here

<table data-view="cards"><thead><tr><th></th><th></th><th data-hidden data-card-target data-type="content-ref"></th></tr></thead><tbody><tr><td><strong>Connect your source code</strong></td><td>Sign up and integrate GitHub, GitLab, Azure DevOps or Bitbucket.</td><td><a href="/arnica-documentation/getting-started/scm-integrations.md">SCM Integrations</a></td></tr><tr><td><strong>Set up sign-in and users</strong></td><td>Configure SSO, invite members and assign roles.</td><td><a href="/arnica-documentation/security/sso-integration.md">SSO Integration</a></td></tr><tr><td><strong>Configure policies</strong></td><td>Decide which risks block a pull request, who is notified and how findings are dismissed.</td><td><a href="/arnica-documentation/code-risks/code-risk-policy-settings.md">Code Risk Policy Settings</a></td></tr><tr><td><strong>Find and fix code risks</strong></td><td>Understand SAST, SCA and IaC findings and how to triage them.</td><td><a href="/arnica-documentation/code-risks/static-application-security-testing-sast.md">Static Application Security Testing (SAST)</a></td></tr><tr><td><strong>Detect and mitigate secrets</strong></td><td>How Arnica detects, validates and mitigates hardcoded secrets.</td><td><a href="/arnica-documentation/hardcoded-secrets/secret-detection.md">Secret Detection</a></td></tr><tr><td><strong>Notify developers where they work</strong></td><td>Connect Slack or Microsoft Teams for alerts and approvals.</td><td><a href="/arnica-documentation/getting-started/chatops.md">ChatOps Integrations</a></td></tr></tbody></table>

## More resources

* **Ticketing:** create Jira, Azure DevOps Boards and Linear issues from findings. See [Ticket Management](/arnica-documentation/getting-started/ticket-management.md).
* **Inventory and SBOM:** see every repository, identity and open source package. See [Software Bill of Materials (SBOM)](/arnica-documentation/inventory/software-bill-of-materials-sbom.md).
* **API:** automate with the Arnica API. The full reference is in the [API Swagger](https://api.app.arnica.io/swagger).
* **Help:** open and track requests in the [Support Portal](/arnica-documentation/platform-operations/support-portal.md), or email <support@arnica.io>.