> For the complete documentation index, see [llms.txt](https://developer.harness.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://developer.harness.io/security-testing-orchestration/3.0/new-to-sto/sto-whats-supported/features.md).

# Harness STO Features

This document outlines all the key features of Harness STO, providing a quick overview and links to detailed documentation for further exploration. To determine if a specific feature is supported in your deployment, please refer the [Deployment Options Documentation](/security-testing-orchestration/new-to-sto/sto-whats-supported/sto-deployments.md).

**1.⁠ ⁠Security Scanners** STO integrates with multiple security scanners to detect vulnerabilities. The supported scanners vary by scan type. View the list of [supported scanners](/security-testing-orchestration/new-to-sto/sto-whats-supported/scanners.md)

**2.⁠ ⁠Custom Scan and Ingestion** STO allows ingestion of scan results from supported scanners that are not available as native steps. This enables integration with additional security tools. Learn more about [Custom Scan and Ingestion](/security-testing-orchestration/3.0/use-sto/sto-custom-scanning-and-ingestion/custom-scan-reference.md)

**3.⁠ Scanner ⁠Scan Modes** Each supported scanner may offer different scan modes: Orchestration, Ingestion, and Extraction. These modes determine how the scanner interacts with your applications and infrastructure:

* **Orchestration**: STO manages the entire scanner execution process.
* **Ingestion**: STO processes scan results generated by a scanner that was run externally.
* **Extraction**: STO retrieves pre-existing scan results from a scanner without initiating a new scan.

For details on specific supported modes and configuration instructions for each scanner, refer to individual scanner's documentation. To learn more about the scan modes refer to [STO scan modes](/security-testing-orchestration/new-to-sto/key-concepts/sto-workflows-overview.md)

**4.⁠ ⁠Create and Enforce Policies** STO supports Open Policy Agent (OPA) policies to enforce security standards. Policies can be applied to scan results for compliance and governance. For a comprehensive guide on policy creation and enforcement, refer to [policy enforcement documentation](/security-testing-orchestration/3.0/use-sto/enforce-sto-policies-for-governance/create-opa-policies.md)

**5.⁠ ⁠Dashboards and Reporting** STO provides dashboards to visualize scan data, track trends, and generate reports to inform your security strategy. [View scan results in dashboards](/security-testing-orchestration/3.0/use-sto/sto-dashboards-and-reports/security-testing-dashboard.md).

**6. Issue Exemptions** Control which issues are flagged during policy enforcement by creating exemptions. Request exemptions for individual issues or submit bulk exemption requests for multiple issues from the **Vulnerabilities** tab. Further, view the logs associated with exemptions for each issue. Go to [Request issue exemption](/security-testing-orchestration/3.0/use-sto/sto-exempt-issues/exemption-workflows.md) to learn more.

**7.⁠ ⁠Create Jira Tickets** STO allows creating Jira tickets for detected security issues directly from the UI. Refer to create [Jira tickets documentation](/security-testing-orchestration/3.0/use-sto/jira-integrations.md).

**8.⁠ ⁠Remediate Issues with Harness AI** STO integrates with Harness AI to generate remediation suggestions based on scan findings. [Use Harness AI for issue remediation](/security-testing-orchestration/3.0/use-sto/sto-remediate-issues/ai-based-remediations.md)

**9.⁠ ⁠Raise Pull Requests** For repository-based findings, STO allows creating pull requests with AI-generated fixes. [Raise pull requests for security fixes](/security-testing-orchestration/3.0/use-sto/sto-remediate-issues/ai-based-remediations.md#create-pull-request-from-sto)

**10.⁠ ⁠Set Notifications** Notifications can be configured for security issues to alert teams when vulnerabilities are detected. [Configure notifications](/security-testing-orchestration/3.0/use-sto/sto-set-notifications/email-notifications.md)