Software assesses web services for optimization.
Share:
Press Release Summary:
As testing solution, eXamine Enterprise enables users to assess web services for compliance with security policies, industry standards, and best practices. It provides features such as web services policy editor, support for multiple users in multiple roles, and shared database of vulnerability profiles, policies, test suites, and test results. Product delivers visibility and control over implementation of web services security policies while eliminating vulnerabilities.
Original Press Release:
Kenai Systems Unveils eXamine Enterprise at DEMOfall 2005
New Member of eXamine Family Brings Collaboration and Accountability to Enforcement of Web Services Vulnerability and Security Policies
HUNTINGTON BEACH, Calif., DEMOfall 2005, Sept. 19 /-- This week at DEMOfall 2005, Kenai Systems, Inc., a leading provider of Web services vulnerability assessment and management solutions, unveiled the newest member of the eXamine family of products, eXamine Enterprise. eXamine Enterprise is an advanced testing solution that enables security professionals, compliance officers, software developers and quality assurance teams to assess Web services for compliance with security policies, industry standards and best practices. eXamine Enterprise supports organizations that have adopted a policy-based approach to business by providing features such as a Web services policy editor, support for multiple users in multiple roles and a shared database of vulnerability profiles, policies, test suites and test results. Kenai Systems will demonstrate eXamine Enterprise at the DEMOfall 2005 conference on Wednesday, September 21. More information about eXamine Enterprise can be found at the company's website, www.kenaisystems.com.
"Prior to the availability of eXamine Enterprise, the prevailing wisdom was that Web services presented extraordinary IT security risks. These risks were especially challenging for organizations, such as financial services firms and government agencies, that have critical security or policy compliance requirements," said Bill Kesselring, CEO of Kenai Systems. "Using eXamine Enterprise, organizations can take advantage of the granularity and fluidity of Web services to make business processes more secure than if they were implemented using traditional monolithic applications. We believe that once organizations have an automated and comprehensive vulnerability assessment solution in place, they will choose Web services as the most secure enabling technology available."
Cost-Effective Security Begins in Development
"By testing Web services for security exploits and compliance before deployment, enterprises can avoid costly security vulnerabilities and compliance infractions in production," said Ray Wagner, Research Director at Gartner. "Enterprises should implement a systematic process for detecting and eliminating vulnerabilities in development. Taking this proactive approach improves security and lowers costs."
eXamine Enterprise provides unprecedented visibility and control over the implementation of Web services security policies and the elimination of Web services vulnerabilities. To supplement the extensive library of Web services vulnerabilities that ships with eXamine Enterprise, security professionals can use eXamine Enterprise to author security policies and apply them to particular Web services. The software then automatically generates tests that detect security vulnerabilities and policy violations. Finally, the software generates a suite of reports to provide managers with quantifiable measures of compliance. Using eXamine Enterprise, security professionals can be assured that their guidelines and policies are systematically implemented, without requiring quality assurance and development teams to undergo intensive Web services security training.
eXamine Enterprise's features include:
-- Support for multiple users across the enterprise, allowing policy experts, testers, compliance officers and developers to share policies and test suites and to report consolidated results
-- A policy editor, which enables users to define security policies and associate them with particular Web services, assuring compliance within the organization
-- Support for both known vulnerability testing and security policy compliance
-- Control response support, including a job log explorer with automatic flagging of test results, to enable users to focus rapidly on the portions of the test results requiring developer action
-- A shared security test profile database, to facilitate collaboration between developers, QA personnel, the office of the Chief Security Officer and others
-- Security test profile authoring, enabling users to define their own security test profiles
-- A reports generator, which produces a Service Policy Report, a Vulnerability Compliance Report, a Test Suite Execution Report and a Status report, each with graphics
Pricing for eXamine Enterprise has not been announced.
The eXamine Family of Products
eXamine Enterprise joins eXamineXT in the Kenai Systems family of Web services vulnerability assessment and management solutions. eXamineXT is ideal for individual developers or workgroups that require robust vulnerability and security testing, but not rigorous policy definition and cross-enterprise collaboration capabilities. Prior to eXamine Enterprise's general availability release, which is expected later this fall, promotional pricing for Kenai's eXamineXT product will be available. For more information, contact info@kenaisystems.com.
About Kenai Systems
As a leading provider of Web services vulnerability assessment and management solutions, Kenai Systems is pre-empting Web services vulnerabilities where they are created -- in development. Kenai Systems' solutions enable businesses to realize the important strategic and financial benefits of Web services, without compromising or exposing their key business processes. Kenai Systems was founded in April, 2004 and is headquartered in Rocklin, Calif. For more information, contact 916-783-6960 or visit www.kenaisystems.com.
