Addressing application security across the enterprise

Hailstorm Enterprise ARC addresses application security across the enterprise, and the only one to include patented fault injection technology that also leverages virtualization to provide continuous web application security throughout the application lifecycle. With its intelligent dashboard (rolling in data from all other key application security tools and manual pen testing), Cenzic Hailstorm Enterprise ARC gives companies the ability to automatically discover and inventory applications, viewing comprehensive security status with complete workflow from a central console. Hailstorm Enterprise ARC enables companies to automatically identify all web applications within an environment via web application discovery tool and provides quantitative HARM™ (Hailstorm Application Risk Metric) scores pinpointing vulnerability levels of applications.

Hailstorm Enterprise ARC provides automated security assessment of custom and commercial web applications and works throughout the software development lifecycle to help remediate security vulnerabilities, guide enforcement of internal security policies and support regulatory compliance. With its dashboard views of applications, departments, business units, security and compliance, executives are armed with real-time status of the enterprise and the ability to launch and test any application. Key benefits include:

Cenzic’s technology goes beyond a signature-based approach by emulating a hacker’s attack method - Cenzic maintains the active state of the application while attacking from the browser level. This method allows Cenzic’s solutions to be the only ones to find all critical vulnerabilities, including application logic tests such as session hijacking, strong passwords, privacy policy validation, etc., on top of all the core vulnerabilities like XSS, Buffer Overflow, SQL Disclosure, and others.

Cenzic holds the one of the most important patents for web application security assessment using Fault Injection. The latest release includes integration of key vulnerability information from other sources, including competitors – no web application security software provides as thorough integration and coverage, with documented no false negatives reported.

Furthermore, only Cenzic solutions can test for vulnerabilities across all types of applications and Web infrastructures. Cenzic’s Hailstorm is also the only solution in the industry that provides a complete risk management approach by discovering all the applications automatically and providing automated assessments from a dynamic and intelligent dashboard. Cenzic’s recent innovative product release that integrated with VMware now enables customers to test their production applications through virtualization. Production applications are tested n a secure, virtual environment – leaving the live application intact until the vulnerabilities are located and secured. This innovative approach makes Cenzic the only Web application security provider utilizing the powerful tools of virtualization to secure applications through all phases of the software development lifecycle.

In addition, Cenzic’s solutions integrate with other leading products in the software development lifecycle such as HP Mercury, Borland Gauntlet, Bugzilla, and others.