Software tests web application security.February 7, 2007 -
Powered by Phoenix architecture, WebInspect 7 includes intelligent scanning engines that analyze complex Web 2.0 technologies. It performs simultaneous crawl and audit and concurrent application scanning, providing results within seconds and reporting in real-time throughout scan. Program exposes application logic that was previously hidden, revealing security vulnerabilities. It can authenticate with secure web applications and detect when re-authentication is required.
(Archive News Story - Products mentioned in this Archive News Story may or may not be available from the manufacturer.)
Original Press release
SPI Dynamics
115 Perimeter Center Place, N.E.
Atlanta, GA, 30346
USA
SPI Dynamics New WebInspect(TM) 7 Sets Market Standard for Web Application Security Testing in Web 2.0 Era
WebInspect 7, Built on the Phoenix Architecture, Delivers Faster Scans, Greater Testing Efficiency and the Industry's Most Accurate Results
ATLANTA, Jan. 29 /-- S.P.I. Dynamics, Inc. (www.spidynamics.com), the leading provider of web application security software and services, today announced the release of WebInspect 7, delivering faster scanning capabilities, broader assessment coverage, and the industry's most accurate results. WebInspect 7 is powered by the new "Phoenix" architecture (also announced today: http://www.spidynamics.com/news/pr/pr...) that uniquely addresses the requirements associated with complex Web 2.0 technologies.
"Today's scanners must adapt to address Web 2.0 technologies," said Caleb Sima, CTO and founder, SPI Dynamics. "We are pleased to be the first application security software vendor to offer a new scanning architecture designed to handle this challenge. WebInspect 7 can find vulnerabilities associated with new web technologies that other legacy scanners simply can't."
WebInspect 7 tackles today's most complex web application technologies with breakthrough testing innovations, including simultaneous crawl and audit (SCA) and concurrent application scanning, resulting in the industry's fastest and most accurate automated web application security testing tool.
"WebInspect 7 has leap-frogged traditional application scanning capabilities currently available," said Bill Geimer, Program Manager, USAID ISSO Team. "Our web sites can be very complex and can take considerable time to thoroughly assess. With WebInspect 7, one scan's duration dropped from eight hours to an impressive 45 minutes delivering a 91 percent increase in our assessment efficiency."
"One of the big differentiators for WebInspect 7 is the onboard manual tools that enable us to complement our automated testing efforts," said Joey Peloquin, Security Engineer, JCPenney Co., Inc. "With additional manual testing capabilities within our application security testing programs, we strengthen both our assessment processes and essential collaboration with our development team in order to focus on the critical security issues prior to production and throughout the application lifecycle."
Product highlights available with WebInspect 7 built on the Phoenix architecture:
-- Faster Scans, More Accurate Results - SPI Dynamics' new patent-pending simultaneous crawl and audit (SCA) technology combines the application crawl and audit into a single fluid process. By conducting these activities in parallel instead of sequentially, scan times are reduced by 50 percent or more.
-- Immediate Results -- This new auditing approach provides results to the tester within seconds of starting an assessment and continues to report in real time throughout the scan.
-- Broader Coverage, Reduced False Negatives -- WebInspect 7 includes intelligent scanning engines capable of analyzing complex Web 2.0 technologies to provide broader testing coverage than possible with earlier legacy scanning architectures. WebInspect 7 exposes application logic that was previously hidden, revealing security vulnerabilities undetectable through automated security testing.
-- Simultaneous Scans -- Users can now launch and manage multiple concurrent scans, greatly increasing testing throughput with WebInspect 7.
-- Advanced Authentication Management -- New automated mechanisms eliminate the complexities of authentication even with applications using advanced technologies such as two-factor authentication or CAPTCHA. WebInspect 7 can both authenticate with secure web applications and detect when re-authentication is required. This is essential to ensure complete coverage.
-- Tabbed Interface -- WebInspect 7's all new tabbed interface provides easy single-point access for multiple scans and reports.
-- Integrated Support Channel -- Users can easily submit false positives and other feedback directly to SPI Dynamics from within the product with just one click.
-- Support for IPv6 -- WebInspect 7 is ready for the future Internet with full support for IPv6.
WebInspect 7 built on the Phoenix architecture is available February 14, 2007. For more information on WebInspect 7 and the new Phoenix architecture, please visit www.spidynamics.com.
About S.P.I. Dynamics, Inc.
SPI Dynamics delivers a comprehensive suite of products and services (http://www.spidynamics.com/products/index.html) that help to identify and remediate web application and web services security vulnerabilities found at key stages throughout the web Application Lifecycle. SPI Dynamics solutions enable security professionals, QA testers, and developers to work together to assess, analyze, and remediate web applications and web services for security vulnerabilities, and verify compliance with over 20 security policies like SOX, HIPAA and PCI. The Company's unique approach, utilizing patent-pending Intelligent Engines(TM) technology combined with the largest web application security vulnerability knowledgebase in the industry, delivers unparalleled speed and accuracy. SPI Dynamics' research and development team, SPI Labs, is widely recognized as one of the world's leading authorities on web application security and risk management. The Company counts over 950 customers among Global 2000 enterprises, including over 90 U.S. Federal accounts. SPI Dynamics' strategic partners include Microsoft, IBM, Hewlett-Packard, CSC and Visa. SPI Dynamics is privately held with headquarters in Atlanta, Georgia. For more information, visit www.spidynamics.com or call (866) 774-2700.
WebInspect and Intelligent Engines are trademarks of S.P.I. Dynamics, Inc. Product or service names mentioned herein are the trademarks of their respective owners.
CONTACT: Ashley Vandiver of S.P.I. Dynamics, Inc., office, +1-678-781-4841 or, mobile, +1-404-432-8657, or +avandiver@spidynamics.com
Web site: http://www.spidynamics.com/
http://www.spidynamics.com/news/pr/pr...
http://www.spidynamics.com/products/index.html
|
|
|
|
|
|
|
| 
