Fortify to Buy Competing App Security Firm
By Jennifer deJong
February 1, 2007 —
(Page 1 of 2)
In what may be the first sign of consolidation in the application security market, Fortify Software in mid-January announced plans to buy a competitor.
The Palo Alto, Calif.-based company has entered a definitive agreement to acquire McLean, Va.-based Secure Software. The terms of the sale were not disclosed, but a statement released by Fortify said the acquisition includes “certain intellectual property, capital assets and skilled resources.”
Both companies sell source code analysis tools, which find and fix security flaws early in the development life cycle, before a hacker could exploit them. Fortify plans to incorporate some aspects of Secure Software’s CodeAssure into its own Source Code Analysis (SCA) tool, but it will not sell CodeAssure as a separate offering. “We will support CodeAssure in the short run and transition those customers to Fortify SCA,” said Fortify CEO John Jack, in a phone interview with SD Times. “Both products approach source code analysis in a similar fashion.” The Fortify offering is essentially a superset of CodeAssure, he said.
The acquisition isn’t about products, said Voke analyst Theresa Lanowitz. It’s about CLASP, Secure Software’s methodology for addressing application security at each stage of the application life cycle. CLASP (which stands for Comprehensive, Lightweight Application Security Process) has some real weight behind it, she said. Fortify’s offerings align with the stages of CLASP, in much the same way that IBM Rational tools align with those of the Rational Unified Process, she said, referring to IBM’s lightweight development methodology. “I see this [acquisition] as analogous.”
Fortify has acquired, among other assets, the license rights to CLASP, which Secure Software donated to the Open Web Application Security Project last year, noted Fortify’s Jack. “We have acquired the brainpower behind it,” he said. Fortify was expected to complete the sale by the end of January.
But how much of that brainpower will actually assume a role at Fortify isn’t yet clear. Secure Software CEO Kevin Kernan is not staying on. “I will assist in the transition,” he said. “And some number of employees will come across.” But who, and how many has yet to be determined, said Jack. John Viega, CLASP’s principal author, left Secure Software last year to join McAfee, noted Kernan.
Share this link: http://sdt.bz/30109
Most Read Latest News Blog Resources
Zeichick’s Take: Radio moves from analog waveforms to digital packets
Streaming radio highlights the need for streaming applications to be designed to take up as little bandwidth as possible
|
|
Taking enterprise architecture to the business side
Startup Corso is bringing out a cloud-based planning platform that ties into business plans
|
|
Appcelerator Acquires Cocoafish to Add Instant Mobile Cloud Capabilities to its Industry Leading Titanium Platform
Appcelerator Offers Messaging, Social, Location and Storage Mobile Cloud Services to All Mobile App Publishers
|
|
ComponentOne Releases a Collection of 40+ UI Widgets Powered by HTML5 and jQuery
ComponentOne has announced the 2012 release of Wijmo: a kit of UI widgets for HTML5 and jQuery development
|
Taking enterprise architecture to the business side
Startup Corso is bringing out a cloud-based planning platform that ties into business plans
|
|
Top five apps to manage your workload
Web applications offer new ways to track your “to-do” lists
|
|
Not so fast when it comes to testing in the cloud
Developers face outsourcing, virtual lab management and mobile devices as obstacles
|
|
Xceed releases UX-focused suite for Microsoft’s WPF
"Blendables" helps match user experiences to developer visions
|
Are you at risk for burnout?
Burnout is a severe problem and it can strike at any time. Here's how to tell if you are nearing the edge.
|
|
Agility, mom, and apple pie
If we're to evaluate the state-of-the-art in software development, we should start with the values espoused in the Agile Manifesto.
|
|
RIM woos developers with free tablet
How do you get more apps ported to the BlackBerry PlayBook? By giving every developer a free tablet, of course!
|
|
GitHire: Use Headhunters to Find Your Perfect Programmer
Are you a hiring manager tired of scouring the job boards? Check out this new service that will find 5 people interested in your jobs.
|
The Hidden Costs of Software Licensing
Moving beyond paper-based software licensing to more flexible, software-based licensing is a business decision. There is a growing trend tow...
|
|
Case Study: You May Need a Development Mechanic
As a contractor for a major financial player in Germany, SOBEGE, a German-based consultancy specializing in embedded IT and web services, wa...
|
|
Ensuring Software Quality at a Major International Bank
One of the world’s leading international banks has adopted AgitarOne technology for delivering generated unit tests for their Java software...
|
|
Load Testing Adobe Flex Applications
Adobe Flex applications may be different from applications you’ve worked with before. For classic HTML web applications, the server does all...
|