New Offering from CAST Makes Business-Critical Software More Secure

CAST, a leader in software analysis and measurement, announced CAST for Security, a new offering that leverages system-level analysis to strengthen the security of business-critical software.

CAST for Security helps organisations optimise application design to protect sensitive data by preventing common software attacks and enforcing architectural constructs known to keep data secure.

Combining technology from the Application Intelligence Platform (AIP) and specific rules for static application security testing (SAST), CAST for Security flags security hot spots that are vulnerable to attack, ensures secure coding practices, eliminates false positives and trends security performance over time.

“Cyber risk and security challenges have moved beyond network-level issues to the application layer. To be successful in this new paradigm, CIOs must adopt a holistic, proactive and design-based approach to securing applications while not overwhelming development teams,” said Olivier Bonsignour, EVP of Product Development at CAST.

“As organisations adopt DevOps and Agile methodologies for speed, CAST for Security opens a new line of cyber defence by inserting secure design practices from the beginning of the software development lifecycle, resulting in high-quality, secure apps that can still be delivered in a timely manner.”

Most security tools that analyse source code only look for intrusion vulnerabilities, like SQL injection and cross-site scripting. This approach still leaves business-critical data at risk.

CAST for Security uses AIP’s system-level analysis to create an architectural blueprint for applications and immediately identify data call pathways that are vulnerable. This also enables teams to estimate the security debt of critical applications for a more complete picture of software risk.