• E-mail
• Print
• Comment
• Font Size
• Digg
• del.icio.us
• Discuss article

Secure Software Expands and Enhances CodeAssure Product Suite to Meet the Diverse Needs of Development Organizations

Posted on: Monday, 14 November 2005, 12:00 CST

Company Breaks New Ground with Innovative, Low-Cost Analysis Tool for Individual Developers, While Expanding Flagship CodeAssure Suite to Deliver Collaboration, Customization and Compliance Capabilities to Software Project Teams, Security Auditors and Managers

Secure Software, the authority in automated application security products and process technology, today announced the expansion and updating of the Company's CodeAssure(TM) source code analysis product suite. With new products and expanded capabilities, CodeAssure continues to provide the optimal application security solution to the still evolving requirements of individual developers, software development teams, managers and executives. As part of the expansion, the Company will offer three products, CodeAssure Solo, CodeAssure Team and CodeAssure Enterprise, each intended to address the diverse needs of developers, architects, auditors and managers within both development and security organizations worldwide.

"Many organizations are still wrestling with how and where to address the application security dilemma--and we believe a 'one size fits all' solution does not address the key use cases," said Kevin Kernan, CEO of Secure Software. "Our expanding product suite enables everyone from an individual developer or architect to an organization with hundreds or thousands of people to fully realize the tremendous cost and quality benefits of locating and fixing vulnerabilities in software as early as possible in the development process."

In a related announcement today (http://www.securesoftware.com/news/pr.html), Secure Software announced the immediate availability of CodeAssure Solo, the industry's first enterprise-class application security tool designed specifically to meet the needs and cost requirements of individual developers and auditors. Two additional components of the new CodeAssure Suite, CodeAssure Team and CodeAssure Enterprise, are built on enhanced versions of existing CodeAssure products, offering many new features designed to address the collaboration, policy management and risk management requirements of large development and security organizations.

Some of the largest IT providers to the U.S. Government, including BAE Systems, are familiar with Secure Software's products. "Requirements for reviewing source code for applications deployed across an enterprise are growing due to regulatory compliance," said Marc Perrelli, technical director, BAE Systems Information Technology. "Source code analysis tools that can help identify and remediate security defects early in the software lifecycle help to ensure security is built in to the application, avoiding costly corrections and time after deployment. Secure Software is making it possible for developers at organizations of all sizes to begin using these tools and start impacting the security quality of their products."

Secure Software's expanded suite of application security products will allow all types of organizations to benefit from the industry's most accurate analysis tools, regardless of company size or budget. Secure Software's new suite includes:

-- CodeAssure Solo--priced within reach of individuals, yet equipped with enterprise-class features for comprehensive and accurate analysis. CodeAssure Solo is easy to install and provides swift, accurate results in minutes. Solo is an Eclipse plug-in that analyzes Java source code for security vulnerabilities and is available for download today. Future versions of CodeAssure Solo will support Visual Studio and .NET and will be available later this year

-- CodeAssure Team--promotes collaboration between developers, security specialists and others involved in identifying, assessing and remediating vulnerabilities in development projects, speeding resolution time and ensuring a consistent focus on high-impact problems across the entire team. CodeAssure Team enables project team members to easily share vulnerability reports, status information and individual assessments and comments. CodeAssure Team supports programs written in Java, C and C++ in the Eclipse IDE. Support for Microsoft(R) Visual Studio(R), with expanded language support for .NET languages -- C#, VB.NET and ASP.NET -- is planned for release later this year.

-- CodeAssure Enterprise--supports the introduction and enforcement of application security analysis, standards and best practices across entire organizations, including externally developed code. Significantly expanded and improved build-time analysis capabilities enable routine security assessments to be performed alongside other traditional tests and checks. Updated policy management and compliance capabilities automatically subject analysis results to detailed checks, identifying high-priority problems, lack of support for corporate standards and code not meeting acceptance criteria. With a fully documented knowledgebase API, organizations can now extend the already comprehensive CodeAssure analysis engine to address their unique security requirements and checks.

Pricing & Availability

CodeAssure Solo is available for download at www.securesoftware.com/trial. The product is available as a complimentary 10-day trial and costs $399 per user for a one year subscription.

CodeAssure Team is available immediately and starts at $3,295 per user.

CodeAssure Enterprise is also available immediately and starts at $46,995 per server.

Please contact Secure Software (www.securesoftware.com) for more information.

About Secure Software

Based in McLean, Va., Secure Software provides application-security products and process technology that help organizations cost-effectively eliminate security flaws at the source - insecure software code - in legacy, acquired and new-start applications. The Company's CodeAssure(TM) product suite automates vulnerability discovery and analysis for prioritizing and fixing insecure software code, and provides process guidance for building more secure applications early in the development lifecycle. Enterprises, development teams and individual developers in government, financial services, healthcare and software manufacturing use Secure Software's solutions to improve software quality, reduce application security risk and comply with industry regulations. For more information, visit www.securesoftware.com.

Source: Business Wire

More News in this Category