Johannesburg, 14 Sep 2011
HP today announced a new suite of products for automating and managing application security in the enterprise, including the only integrated application security testing solution available on-premises or on-demand that scales to identify vulnerabilities in thousands of applications.
Application vulnerabilities pose significant threats to enterprises, exposing them to costly and increasing cyber crime. In fact, the Ponemon Institute's Second Annual Cost of Cyber Crime Study, released in August, revealed the median annualised cost of cyber crime incurred by a benchmark sample of organisations was $5.9 million per year, with a range of $1.5 million to $36.5 million each year, per organisation.
The HP Fortify Software Security Centre suite enables customers to automate their Software Security Assurance program, and proactively eliminate vulnerabilities in applications.
Comprising the Static Application Security Testing (SAST) solution, formerly known as the HP Fortify 360 suite, and the Dynamic Application Security Testing (DAST) solution, formerly known as HP Application Security Centre, features of the new suite include:
* Elastic and scalable application security testing capability, called CloudScan, enabling clients to more frequently test applications, delivering faster results.
* Integrated static and dynamic application security testing in real-time, allowing clients to rapidly locate and repair more vulnerabilities in applications with HP WebInsepct Real-Time.
* Ability to quickly scale application testing projects with HP Fortify on Demand, a security as a service solution.
“Enterprises need to secure a wide range of applications from many sources across multiple platforms and environments, and no amount of perimeter security or outside auditing can protect applications from advanced application-layer vulnerabilities,” said Clive Brindley, HP Software Channel Manager, South Africa.
“HP Fortify Software Security Centre is the 'one-stop shop' for everything a client needs for rapid application testing and creating a secure development culture.”
The HP Fortify Software Security Centre suite provides two key capabilities for managing a comprehensive Software Security Assurance program:
* Security testing enables users to identify vulnerabilities throughout the application life cycle - whether applications are developed internally or externally - with three of the most effective software security analysis technologies in use today:
* Static Application Security Testing (SAST) with HP Fortify Static Code Analyser (SCA);
* Dynamic Application Security Testing (DAST) with HP WebInspect; and
* Real-time integration of static and dynamic application security testing techniques, known as real-time hybrid analysis.
* Secure development life cycle automates management, tracking, remediation and governance of enterprise software risk. This enables customers to fix, track and report on vulnerabilities, as well as proactively define process, policy and control of their Software Security Assurance programs.
By removing security vulnerabilities in applications before they are deployed, organisations can reduce their risk of a security breach and apply the savings to growth or innovation. HP Fortify Software Security Centre enables organisations to build or expand their Software Security Assurance programs in the way that best suits their unique needs and budgets.
HP Fortify Software Security Centre is now available worldwide. Additional information is available here.
Share