I’ve tried it, I like it and I know we got pretty far with it but unfortunately I left that company. I can connect you with some people who use it I think.
SonarQube and WhiteSource are the tools I have used most and I love them. ZAP looked really really interesting but I need to learn more.
Oh wow! I think I managed to answer all of them!
THANK YOU so much for all the amazing questions! Don’t hesitate to connect at any social media or keep asking questions here
This was fabulous, thank you Ministry of Testing for having me 
/Lena
I suggest going for eJPT certification.It builds teh foundations of Security and all basic types of attacks(web and network)…I just loved it!.
Next step would be to use these tools and ofcourse get your networking basics rock solid.
Next step…practice.
And if you like it more …go for OSCP.
Still loving it? Do the CISSP and this is the one certification which gives you a helicopter view of everything you wanna know about security.