DEVOPSdigest

Synopsys announced the launch of Synopsys Software Risk Manager, a new application security posture management (ASPM) solution.

Software Risk Manager enables security and development teams to simplify, align and streamline their application security testing across projects, teams and application security testing (AST) tools. It aligns intelligent policy-driven orchestration and vulnerability management capabilities with the Synopsys Software Integrity Group's market-leading SAST and SCA engines, with broad support for other open-source and commercial AST tools. In combination, Synopsys' ASPM solution delivers an enhanced ability to implement application security consistently across any organization.

"Application security programs need to be effective and efficient at reducing software risk in order to deliver value," said Jason Schmitt, general manager of Synopsys' Software Integrity Group. "Many organizations embracing digital transformation are struggling with the complexity and operational costs of managing their software risk at scale. Synopsys Software Risk Manager provides teams with a holistic view of their application security posture while accelerating time to value and reducing the overall cost of their AppSec programs."

Software Risk Manager is built on the core technologies of Synopsys' Code Dx and Intelligent Orchestration products, redesigned and enhanced to deliver a comprehensive ASPM solution that enables teams to:

- Implement policy driven AppSec at scale. Centrally define and enforce universal security policies which specify parameters for test execution and vulnerability management.

- Unify user experience across disparate application security testing tools. Maximize the value of existing security investments while simplifying resourcing and operations. Improve ability to transition and consolidate tooling across teams.

- Consolidate vulnerability reporting and management across projects, teams and tools. Obtain a complete picture of security risks that is normalized, deduplicated and prioritized across tools.

- Simplify AppSec integration and orchestration in development workflows. Integrate security workflows within existing developer toolchains and systems and enable quick onboarding for existing projects and builds.

- Optimize core application security testing with a single, unified solution. Efficiently deploy, manage and report on core application security testing functions leveraging the same market-leading SAST and SCA engines that power Synopsys offerings.