June 01, 2006
New & NoteworthyThe latest news and developments.
My Web Server Can Beat Up Your Web ServerNo software job is finished until the security work is done. For Web apps, that means torture-testing the deployed code, looking for everything from broken links to SQL injection vulnerabilities. Frequently, such testing involves installing and configuring software that's practically as complex as developing the application itself. Having reviewed Watchfire's AppScan, I can attest that it delivers useful results, but the process is a lot more involved than slapping in a CD and letting it auto-run.
Now, Watchfire is offering AppScan as a hosted service, taking the installation, update, and initial configuration headaches right out of the picture. In fact, the service comes with a Watchfire security analyst to set up the scans, analyze the results, and produce comprehensible reports. For organizations that don't want or need to devote staff and computing resources to web site security testing, this model could be a boonjust off-loading the update burden can be significant, and since new threats arise daily, you can hardly afford to fall behind.
Because needs vary widely, pricing is a little more individualized than for a shrink-wrap package; contact Watchfire for pricing.
Watchfire, 880 Winter Street, Waltham, MA 02451, Tel: (781) 810-1450, Fax: (781) 890-2087, www.watchfire.com
|
|
||||||||||||||||||||||||||||||
|
|
|
|