VERAFIED Software DirectoryThe VERAFIED Software Directory identifies software applications from Independent Software Vendors (ISVs), Service Providers and Enterprises that have earned the VERAFIED or VERAFIED HIGH ASSURANCE security marks. The VERAFIED security marks signify that a software provider has taken appropriate steps to remove vulnerabilities in their software or to comply with respected industry standards such as the OWASP Top 10 or the CWE/SANS Top 25 Most Dangerous Software Errors. A VERAFIED mark and Directory listing provides insight into the security quality of the software similar to the insights provided to their customers by independent organizations such as Standard and Poor's® and Consumer Reports®. Due to the nature of software security testing, no organization can guarantee that the lack of discoverable flaws means their software is completely secure. However, through rigorous independent testing using Veracode’s automated and/or manual penetration analysis these organizations have utilized the most widely accepted and comprehensive methods available to secure their software. The following vendors and products have been assessed by Veracode and have received the VERAFIED or VERAFIED HIGH ASSURANCE mark for software security.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Veracode's application security testing solution quantifies an application's security risk based on types, number and severity levels of flaws identified in the application. Veracode analyzes the key application security risks that matter most to enterprises including the most prevalent software vulnerabilities, the absence and presence of security features (e.g. encryption) and backdoors in third-party code. Each application's rating is generated based on automated static binary analysis, automated dynamic and/or manual security analysis techniques. Veracode solutions deliver application security review services for enterprises that want to cost-efficiently achieve software security by identifying flaws in applications. Veracode SecurityReview is the first automated, on-demand, application security software solution that uses static binary analysis. Static application security testing enables organizations to scan software for flaws and malicious code before purchasing or deploying it. And because Veracode's approach to Static application security testing uses binary analysis—scanning binary code (compiled or "byte" code) instead of source code—SecurityReview can test 100 percent of an application, offering comprehensive coverage and greater application security. In addition, Veracode's web application security testing can provide Web services security as a critical part of an enterprise-wide software assurance strategy. Please access other sections of this site to learn more about our approach to security testing, code review, web security and application backdoors. |