VerAfied Software AssuranceThe VerAfied security mark is quality indicator for the security level of applications and software components. Veracode’s ratings are completely transparent and based on industry accepted standards for software assessment from NIST, CWE and CVSS against vulnerability benchmarks such as the OWASP Top 10 and CWE-SANS Top 25. The VerAfied mark signifies that an application has received an independent application risk management assessment from Veracode and the provider has resolved or mitigated any vulnerabilities identified. Due to the nature of software security testing, no organization can guarantee that the lack of discoverable flaws means their software is completely secure. However, through rigorous independent testing using Veracode’s automated static binary analysis, automated dynamic web vulnerability scanning, enhanced dynamic analysis testing, and/or manual penetration analysis these organizations have utilized the most widely accepted and comprehensive methods available to secure their software. The following vendors and products have been assessed by Veracode and have received the VerAfied mark for software security.
|
||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Veracode's application security testing solution quantifies an application's security risk based on types, number and severity levels of flaws identified in the application. Veracode analyzes the key application security risks that matter most to enterprises including the most prevalent software vulnerabilities, the absence and presence of security features (e.g. encryption) and backdoors in third-party code. Each application's rating is generated based on automated static binary analysis, automated dynamic and/or manual security analysis techniques. Veracode solutions deliver application security review services for enterprises that want to cost-efficiently achieve software security by identifying flaws in applications. Veracode SecurityReview is the first automated, on-demand, application security software solution that uses static binary analysis. Static application security testing enables organizations to scan software for flaws and malicious code before purchasing or deploying it. And because Veracode's approach to Static application security testing uses binary analysis—scanning binary code (compiled or "byte" code) instead of source code—SecurityReview can test 100 percent of an application, offering comprehensive coverage and greater application security. In addition, Veracode's web application security testing can provide Web services security as a critical part of an enterprise-wide software assurance strategy. Please access other sections of this site to learn more about our approach to security testing, code review, web security and application backdoors. |