News

Is Integration the Key?

"Through 2010, software development organizations that integrate security into their software development life cycles will experience an 80 percent decrease in critical vulnerabilities found in their publicly released software or externally facing web applications", as per a recent Gartner report. Fortify Software has announced a partnership between Fortify Source Code Analysis Suite and Watchfire AppScan.

"Scanning both raw source code and compiled web applications for software vulnerabilities is essential to ensuring the security of application systems," said Bruce H. Bonsall, Chief Information Security Officer, MassMutual Financial Group.

"Today we use two different tool sets to accomplish those separate but related tasks. Having one interface to monitor the results of both code scanning and Web vulnerability testing of our applications will likely save us time and resources. I like the decision by Fortify and Watchfire to align their development and marketing efforts. By virtue of such a partnership, the integration of the tools isn't left to the end-users and they don't need to navigate two different interfaces. That helps simplify things and lets users focus on more important issues."

"Having built the first patent-pending solution that integrates source code analysis and black-box testing, we believe it's critical to combine these two capabilities into one solution and deliver a single dashboard interface and increased precision for software security overall," said John M. Jack, Chief Executive Officer, Fortify Software.


print	save	email	comment