+49 8122 559170

Parasoft: Higher SW quality and lower risks

Agentur Lorenzoni Latest articles Details

Published by by Beate Lorenzoni

Parasoft Empowers Customers to Shift-Left their Software Security and Compliance Testing for DevSecOps

This example OWASP-focused dashboard screenshot shows Parasoft’s reporting and analytics hub.

Parasoft, the global leader in automated software testing, today announced the latest releases of Parasoft Jtest and Parasoft dotTEST, their Java and .NET development testing solutions that combine static analysis, security testing, unit testing, and code coverage analysis to help users maximize application quality and security, while minimizing business risks. The new releases (10.4.2) focus on enabling DevSecOps to make security a part of the development process, and help organizations achieve continuous security and compliance with more support for security standards than ever seen before. Parasoft’s security solutions integrate into the daily development workflow from the start, providing teams with continuous visibility into security standards compliance, and helping them remediate vulnerabilities earlier and continuously throughout the DevSecOps journey.

To learn more about this latest release, please visit: https://blog.parasoft.com/new-releases-of-parasoft-jtest-parasoft-dottest-10-4-2

Gartner’s 2019 Planning Guide for Security and Risk Management recommends that software organizations “Align security and DevOps practices for a holistic DevSecOps approach. Security should become an integral part of processes and automation, and in turn, it should take full advantage of the strengths of these processes and automation. Aside from supporting an inherently more agile environment, this approach ensures that security is consistent and repeatable.” (source: Gartner, 2019 Planning Guide for Security and Risk Management, Ramon Krikken et al., 5 October 2018)

Parasoft’s software testing solutions, especially with the newest enhancements, are helping organizations address these recommendations. Today’s releases broaden their scope of support for security standards, making Parasoft the only vendor to cover all of the important security recommendations. Parasoft’s solutions provide pre-configured, out-of-the-box, and fully-customizable test configurations for security standards, including CWE Top 25, CWE CUSP, OWASP Top 10, PCI-DSS, and UL 2900. Developers can execute real-time security and compliance scans, directly within their development workflows in the IDE, to see potential security vulnerabilities right where they can understand and fix them prior to check-in.

In this release, Parasoft has also built into the product a broad array of context-specific training and tutorials for vulnerabilities identified in the code, to help developers learn about and address security issues as they work, enhancing their security expertise. The same security configuration or policy can also be leveraged by scans executed as part of the CI/CD pipeline, providing a safety-net to gate the delivery pipeline and ensure that insecure code does not get promoted to later stages. Bringing everything together is Parasoft’s centralized reporting dashboard that dynamically demonstrates the application’s security and compliance status in real-time, with widgets that directly correlate to the security standard’s risk assessment framework being used, and automatic report generation for auditing.

“Due to a growing concern over data breaches, companies are now holding their software teams and vendors accountable for meeting standard application security policies to help combat these threats.  Nonetheless, breaches continue to occur daily and many organizations struggle to integrate testing into their development process, and end up capturing these vulnerabilities in later stage testing, which is too late in the cycle,” stated Kapil Bhandari, Product Manager at Parasoft. “Parasoft’s solutions are helping organizations address this by integrating these activities early on to enable shift-left security testing and compliance. By doing so, vulnerabilities can be caught and addressed at a lower cost, and security and compliance metrics can be collected and leveraged at various times throughout development.”

About Parasoft

Parasoft

Parasoft provides innovative tools that automate time-consuming testing tasks and provide management with intelligent analytics necessary to focus on what matters. Parasoft’s technologies reduce the time, effort, and cost of delivering secure, reliable, and compliant software, by integrating static and runtime analysis; unit, functional, and API testing; and service virtualization. Parasoft supports software organizations as they develop and deploy applications in the embedded, enterprise and IoT markets. With developer testing tools, manager reporting/analytics, and executive dashboarding, Parasoft enables organizations to succeed in today’s most strategic development initiatives — agile, continuous testing, DevOps, and security.

Go back

About us

Mutual trust is everything – which is why we maintain open, honest and cooperative partnerships. We look at things from the client's perspective. This allows us to speak credibly and competently on our clients’ behalf and to provide the best possible support. We also relish the challenge of developing integrated communication concepts and drive issues forward.

Contact

PR Ageny Lorenzoni GmbH
Landshuter Str. 29
85435 Erding
Germany
 
Ph: +49 8122 55917-0
Fax: +49 8122 55917-29
eMail: pr@lorenzoni.de

Latest article

Rutronik at Sensor+Test 2019: Hall 1, Booth 319

Rutronik’s booth (hall 1, booth 319) at the 2019 Sensor+Test trade show will focus on solutions for intelligent Internet of Things (IoT) applications. The trade show will take place from June 25 to 27 in Nuremberg / Germany.

As part of its SMART initiative, the distributor will be presenting the latest technological developments around sensors and security, Bluetooth, the smart home, predictive maintenance, narrowband IoT, and tracking.

Read more …