App Security Gets Caught in a Hailstorm
Cenzic platform adds dashboard view of security tools
August 2, 2007 —
As the landscape of the application security market changes significantly with the recent acquisitions of two of Cenzic’s major competitors, the Santa Clara-based Web app security provider is looking to devour a larger piece of the pie.
The company was expected to release version 5.0 of Cenzic Hailstorm ARC (Application Risk Controller), the company’s risk management platform for app security, in mid-July.
This version offers a dashboard view of Cenzic’s application security tools, along with the ability to work with third-party tools including Hewlett-Packard’s SPI Dynamics and IBM’s Watchfire lines. Hailstorm 5.0 can import application name and assessment results, and includes a reference specification for importing manual penetration test results. Hailstorm ARC 5.0 also provides integration framework capabilities with tools from Borland, Bugzilla, Fortify, HP and Ounce Labs.
Enhanced messaging log features in the update can show the history of an application, storing information about each time an application is tested.
Holistic Look
“We’ve taken more of [a] risk management approach, versus having a small penetration testing tool trying to find something,” said Mandeep Khera, vice president of marketing for Cenzic. “This looks at the holistic view of your entire enterprise; how many apps there are, if they’re secure or not, and where all the different results are coming from.”
John Weinschenk, CEO of Cenzic, said that with HP’s acquisition of SPI Dynamics and IBM’s acquisition of Watchfire, Cenzic has an opportunity to grow in the market. He believes that one of the consequences of these acquisitions is that security providers such as CA, McAfee and Symantec will get into the application security space.
Weinschenk explained, “[HP and IBM are] both focused on putting app security in the development-level testing, and I think that really misses the whole value of testing, which is testing the production applications. I think there are going to be huge holes left for that. I think we’re one of the companies that can fill those holes.”
When asked if he would consider an offer for an acquisition, Weinschenk said that if the right deal came along, he would certainly take it.
“I think our stance is that we’re very happy growing our business as we continue to take more market share in the space. Obviously, if someone came to the table and it made business sense for our customers and shareholders, then we’d do it, and if it doesn’t, we won’t. There’s no rush, from our viewpoint.”
Share this link: http://sdt.bz/30999
Most Read Latest News Blog Resources
Taking enterprise architecture to the business side
Startup Corso is bringing out a cloud-based planning platform that ties into business plans
|
|
Zeichick’s Take: Radio moves from analog waveforms to digital packets
Streaming radio highlights the need for streaming applications to be designed to take up as little bandwidth as possible
|
|
Appcelerator Acquires Cocoafish to Add Instant Mobile Cloud Capabilities to its Industry Leading Titanium Platform
Appcelerator Offers Messaging, Social, Location and Storage Mobile Cloud Services to All Mobile App Publishers
|
|
ComponentOne Releases a Collection of 40+ UI Widgets Powered by HTML5 and jQuery
ComponentOne has announced the 2012 release of Wijmo: a kit of UI widgets for HTML5 and jQuery development
|
Taking enterprise architecture to the business side
Startup Corso is bringing out a cloud-based planning platform that ties into business plans
|
|
Top five apps to manage your workload
Web applications offer new ways to track your “to-do” lists
|
|
Not so fast when it comes to testing in the cloud
Developers face outsourcing, virtual lab management and mobile devices as obstacles
|
|
Xceed releases UX-focused suite for Microsoft’s WPF
"Blendables" helps match user experiences to developer visions
|
Are you at risk for burnout?
Burnout is a severe problem and it can strike at any time. Here's how to tell if you are nearing the edge.
|
|
Agility, mom, and apple pie
If we're to evaluate the state-of-the-art in software development, we should start with the values espoused in the Agile Manifesto.
|
|
RIM woos developers with free tablet
How do you get more apps ported to the BlackBerry PlayBook? By giving every developer a free tablet, of course!
|
|
GitHire: Use Headhunters to Find Your Perfect Programmer
Are you a hiring manager tired of scouring the job boards? Check out this new service that will find 5 people interested in your jobs.
|
The Hidden Costs of Software Licensing
Moving beyond paper-based software licensing to more flexible, software-based licensing is a business decision. There is a growing trend tow...
|
|
Case Study: You May Need a Development Mechanic
As a contractor for a major financial player in Germany, SOBEGE, a German-based consultancy specializing in embedded IT and web services, wa...
|
|
Ensuring Software Quality at a Major International Bank
One of the world’s leading international banks has adopted AgitarOne technology for delivering generated unit tests for their Java software...
|
|
Load Testing Adobe Flex Applications
Adobe Flex applications may be different from applications you’ve worked with before. For classic HTML web applications, the server does all...
|