Fortify 360 Release Aims At Eliminating Security Vulnerabilities In Software

Fortify 360 is a suite of integrated solutions for identifying, prioritizing and fixing security vulnerabilities in software while managing the business of ensuring application security. The cornerstone of Fortify’s recently announced Business Software Assurance framework, Fortify 360 executes on the company’s holistic approach to protecting corporate assets and preventing catastrophic data loss by focusing on the most vulnerable area in the enterprise — the software applications that automate critical business processes.

The first solution set of its kind, Fortify 360 uses patented capabilities to precisely identify the location of deadly vulnerabilities at every phase of development through production. Once identified, Fortify 360 provides the means to manage the complex process of repairing the numerous problems that are usually uncovered, as well as a centralized dashboard for effective management and reporting. Fortify 360 allows companies to implement Business Software Assurance as an ongoing business process, seamlessly connecting security, software development and C-level business management teams.

“It’s not just about the technology, but also about bridging the gap between those in the enterprise responsible for development  and security. Security is a low priority in software development compared to functionality, quality and performance, and most business managers are often unaware of the inherent business and security risks of deploying dangerously exposed software,” said Roger Thornton, Fortify’s Chief Technology Officer and founder. “Fortify 360 connects all of these teams, integrating software assurance as a business process throughout the organization.”

Fortify 360 offers:

• Fortify 360 Analysis: applies three integrated levels of analysis including static analysis of the code, dynamic analysis of running applications during QA testing, and real-time monitoring of applications once they have been deployed, providing the most comprehensive security analysis in the market today.
• Audit Workbench: correlates and prioritizes vulnerabilities so that IT and security teams can effectively manage and remediate the most pressing risks first
• Instant Remediation capability: allows rapid response to time-sensitive vulnerabilities affecting deployed applications by delivering patches immediately
• Collaboration Module: provides a shared working environment where security and development teams can work together to resolve vulnerabilities
• Software Security Governance: establishes a centralized security dashboard and control center for effective reporting and trend tracking over multiple applications

In addition to its analysis and remediation processes, Fortify 360 also provides users with regular threat intelligence updates generated by the Fortify Security Research Group, the industry’s only team of researches dedicated to software application security. These updates, known as rulepacks, are well-known throughout the industry for their insight on why real world systems fail and how Fortify customers can best address impending threats.

Reference : Fortify 360

Related :
* One open source software defect fix every six minutes
* Security Test with Fortify Security Tester for MS Visual Studio 2005 Team System
* Analyze Application Vulnerabilities with Compuware DevPartner SecurityChecker 2.0