• E-mail
• Print
• Comment
• Font Size
• Digg
• del.icio.us
• Discuss article

Secure Software Introduces CodeAssure Solo

Posted on: Monday, 14 November 2005, 12:00 CST

Secure Software, the authority in automated application security products and process technology, today announced CodeAssure(TM) Solo, the industry's first enterprise-class application security tool designed specifically to meet the needs and cost requirements of individual developers. CodeAssure Solo is the first installment of an expanded CodeAssure product suite unveiled today in a related announcement (http://www.securesoftware.com/news/pr.html).

CodeAssure Solo is purpose-built to meet the needs of a single developer, but offers the same comprehensive security analysis capabilities that support entire development and security teams. With CodeAssure Solo, anyone - regardless of company size or budget - can benefit from the industry's most accurate analysis tool.

"The software industry and public-sector organizations need to begin implementing measures that can have the broadest possible impact on not only the security of individual enterprises, but on our national critical IT infrastructure," said Sami Saydjari, CEO of the Cyber Defense Agency and one of the architects of a Cyber Manhattan Project proposed to the Bush Administration in 2002. "CodeAssure Solo will help developers quickly and easily identity potential security problems early in the development lifecycle, dramatically improving the quality of their products. Secure Software's strategy for making CodeAssure readily available to the development community is an effective way to inject security testing into the software development lifecycle."

CodeAssure Solo is a fully functioning, stand-alone static source code analysis tool that installs quickly, allowing individual security architects, developers and project managers to swiftly and accurately identify vulnerabilities in software code. CodeAssure Solo is powered by the same enterprise-class analysis engine that is used today by Secure Software's enterprise customers.

"Software security is a critical focus for companies as they look to strengthen their applications against post-deployment security threats," said Claudia Dent, vice president of business development, IBM Rational. "Organizations need processes and tools that deliver security testing and analysis capabilities tailored to the unique requirements and resources of individual developers, development teams and entire enterprises. Secure Software's suite of products, including CodeAssure Solo, is integrated with the IBM Rational Software Development Platform, helping our customers to improve and manage application security throughout the software development lifecycle."

Benefits of CodeAssure Solo include:

-- Rapid Installation--CodeAssure Solo is available as an Eclipse plug-in enabling users to get Solo up and running quickly for swift analysis of Web applications. Within minutes, developers can scan Java source code to begin the process of fixing vulnerabilities and improve the overall quality of their software.

-- Accurate Results--CodeAssure Solo's flow-sensitive analysis swiftly and accurately identifies security vulnerabilities, programming errors and unexpected application behavior, while minimizing annoying false positive indications. Developers and security architects can automatically open problem code with direct links between security flaws and source code, expediting the remediation process. Solo is also equipped with Secure Software's Secure Coding Advisor, an in-depth guide that helps users fix the vulnerabilities that CodeAssure identifies.

-- Comprehensive Analysis Engine--although designed for a single user, CodeAssure Solo provides developers and security auditors with the same in-depth analysis engine as Secure Software's enterprise-level solutions. CodeAssure's vulnerability knowledgebase is the industry's deepest, most comprehensive library of potential flaws in software code.

"Far too little attention is given to testing software for security flaws," said Robin Bloor, partner with Hurwitz & Associates and a former developer. "With the introduction of CodeAssure Solo, Secure Software is now delivering a full range of security testing tools for individual developers, development teams or complete IT shops. The use of software testing tools like this to address software security problems is starting to become an imperative."

"Most developers agree that baking security into the software development lifecycle is vital to improving the overall security of finished products," said Mark Patterson, vice president of engineering at Secure Software. "However, due to go-to-market pressures and their relative lack of security expertise, developers cannot always properly test for vulnerabilities. CodeAssure Solo takes the guess work out of application security by providing individual developers with an accurate, easy-to-use tool for identifying and remediating security flaws."

Pricing and Availability

CodeAssure Solo is currently available for download at www.securesoftware.com/trial. The product is available as an Eclipse plug-in and will support Microsoft Visual Studio soon.

CodeAssure Solo is available as a complimentary 10-day trial and costs $399 per user for a one year subscription. For more information, please visit www.securesoftware.com.

About Secure Software

Based in McLean, Va., Secure Software provides application-security products and process technology that help organizations cost-effectively eliminate security flaws at the source - insecure software code - in legacy, acquired and new-start applications. The Company's CodeAssure(TM) product suite automates vulnerability discovery and analysis for prioritizing and fixing insecure software code, and provides process guidance for building more secure applications early in the development lifecycle. Enterprises, development teams and individual developers in government, financial services, healthcare and software manufacturing use Secure Software's solutions to improve software quality, reduce application security risk and comply with industry regulations. For more information, visit www.securesoftware.com.

Source: Business Wire

More News in this Category