DEVOPSdigest

Optiv Security has partnered with Veracode to improve application security at the development level.

The new Software Assurance as-a-Service (SAaaS) offering leverages Optiv’s cybersecurity knowledge and Veracode’s program management framework and software testing automation technology to help organizations secure web applications without slowing down the speed of development.

“Considering that the majority of web applications are released without being tested for security, our new foundational application security program, in partnership with Veracode, gives organizations confidence to release secure software while reducing risk, time to market and reactive costs,” said Bryan Wiese, Division VP, Advisory Services for Optiv. “As a security solutions integrator, Optiv is uniquely positioned to help organizations’ plan, build and run any element of their cybersecurity programs, including application security.”

SAaaS assists with the detection, analysis and response to application vulnerabilities and the integration of security and development workflows through:

- Static Application Security Testing - Recurring analysis of source code is an application prior to it being compiled to find security vulnerabilities.

- Dynamic Application Security Testing - Securing vulnerability scans on web applications in a running state to identify common security vulnerabilities.

- Software Composition Analysis - Management for open source repositories and libraries to prevent the use of insecure code in applications.

“The Optiv SAaaS offering, powered by automated software testing from Veracode, brings world class AppSec capabilities to satisfy market demand for software that is secure from the start,” said Leslie Bois, VP, Global Channel and Alliances at Veracode. “Optiv SAaaS enables modern organizations of all sizes and maturity levels to take advantage of our highly scalable platform and seamless integration to build a customized AppSec program that delivers secure software faster. This offering can help companies empower their development and security teams, lower their security risk, and turn security into a competitive advantage.”