{"id":5924,"date":"2021-04-08T08:16:41","date_gmt":"2021-04-08T07:16:41","guid":{"rendered":"https:\/\/www.intelligentcio.com\/north-america\/?p=5924"},"modified":"2021-04-08T08:16:42","modified_gmt":"2021-04-08T07:16:42","slug":"invicti-security-releases-enterprise-class-iast-solution","status":"publish","type":"post","link":"https:\/\/www.intelligentcio.com\/north-america\/2021\/04\/08\/invicti-security-releases-enterprise-class-iast-solution\/","title":{"rendered":"Invicti Security releases enterprise-class IAST solution"},"content":{"rendered":"\n<p><strong><em>Netsparker adds depth to web application security testing with new module.<\/em><\/strong><\/p>\n\n\n\n<p>Invicti Security, a global leader in web application security, has announced that it has added Interactive Application Security Testing (IAST) capabilities to Netsparker, its award-winning web application security scanner.<\/p>\n\n\n\n<p>The IAST sensor works hand-in-hand with Netsparker\u2019s Dynamic Application Security Testing (DAST) solution to provide deeper insights into runtime issues and to identify and test local assets that crawlers can\u2019t see.&nbsp;<\/p>\n\n\n\n<p><a href=\"https:\/\/urldefense.proofpoint.com\/v2\/url?u=https-3A__www.ibm.com_security_data-2Dbreach&amp;d=DwMFaQ&amp;c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&amp;r=vxEH6gDM4jV7xMpEpk3h0XfsxF6OhFzNNO5EO3VatnI&amp;m=tF3iPmtjxDkPLhpYPO5ZjDnpcYC-vjdUu4U7-1odWYY&amp;s=9ydtNzR1QvDQ-s6WnZdPIoDcSGB_4TCLCHzSkPg8O0c&amp;e=\" target=\"_blank\" rel=\"noreferrer noopener\">Recent research by IBM Security<\/a> estimates the average cost of a data breach to be US$3.86 million, with the average time to identify and contain one reaching 280 days. To be effective, modern web application security testing must combine the widest possible test coverage with the accuracy required to efficiently isolate and resolve vulnerabilities. Netsparker\u2019s combined dynamic and interactive (DAST + IAST) approach to scanning provides customers with three key benefits:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>More complete scanning: <\/strong>IAST sensors inspect the application \u2018from the inside\u2019 and scan parts of the application that a DAST scanner alone could not see<\/li><li><strong>Additional verification: <\/strong>DAST + IAST scanning analyzes the application\u2019s runtime behavior to provide additional confirmation of vulnerabilities for directly actionable results<\/li><li><strong>Better insight for remediation: <\/strong>IAST scanning can provide line-of-code level details on where vulnerabilities exist, so developers and security pros can address them more quickly and with less manual effort<\/li><\/ul>\n\n\n\n<p>\u201cAdding IAST to Netsparker means that this solution now provides even more actionable results to dev teams so they can remediate vulnerabilities,\u201d said Ferruh Mavituna, Founder of Netsparker and CEO of Invicti Security. \u201cRuntime insights extend an organization\u2019s ability to confidently automate application security testing so they can scale their security operations.\u201d<\/p>\n\n\n\n<p>IAST provides more detailed information about vulnerabilities and possible attack payloads that enable security engineers and Netsparker itself to triage issues faster and more accurately. The insights provided by IAST also help bring developers closer to security with a deeper understanding of security issues in their code.&nbsp;&nbsp;<\/p>\n\n\n\n<p>\u201cAdding the extra vulnerability details from IAST to our existing Proof-Based Scanning changes the dynamics of application security testing, and we\u2019re getting great feedback from customers,\u201d said Mike Mattos, Invicti Security Senior Vice President of Customer Success. \u201cThis is another advancement in Netsparker\u2019s approach to helping developers and security teams work more effectively together to improve an organization\u2019s security posture.\u201d<\/p>\n\n\n\n<p>Combined with the right internal organization and workflows, Netsparker can be set up and used as a fully automated application security platform, allowing companies to shift the entire vulnerability resolution process to the development level.<\/p>\n\n\n\n<p>This new capability expands Invicti Security\u2019s offering across its product portfolio and was developed with the help of the same team that originally created one of the first commercial IAST implementations nearly a decade ago in Acunetix, another Invicti Security product.&nbsp;&nbsp;<\/p>\n\n\n\n<p>Additional details about Netsparker DAST + IAST can be found in this <a href=\"https:\/\/urldefense.proofpoint.com\/v2\/url?u=https-3A__www.netsparker.com_changing-2Dthe-2Ddast-2Dgame-2Dwith-2Dnetsparker-2Diast_&amp;d=DwMFaQ&amp;c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&amp;r=vxEH6gDM4jV7xMpEpk3h0XfsxF6OhFzNNO5EO3VatnI&amp;m=tF3iPmtjxDkPLhpYPO5ZjDnpcYC-vjdUu4U7-1odWYY&amp;s=aW7XPJ3j0sFVUNB774WRR7UGgu8yUYsSA2vT9D4CJVs&amp;e=\" target=\"_blank\" rel=\"noreferrer noopener\">white paper<\/a> or with a <a href=\"https:\/\/urldefense.proofpoint.com\/v2\/url?u=https-3A__www.netsparker.com_comprehensive-2Dvulnerability-2Dcoverage_&amp;d=DwMFaQ&amp;c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&amp;r=vxEH6gDM4jV7xMpEpk3h0XfsxF6OhFzNNO5EO3VatnI&amp;m=tF3iPmtjxDkPLhpYPO5ZjDnpcYC-vjdUu4U7-1odWYY&amp;s=JXlFUWJIkj9pmVym6grijZD54Q9O8wXk2SffCMGrTiY&amp;e=\" target=\"_blank\" rel=\"noreferrer noopener\">product demo<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Netsparker adds depth to web application security testing with new module. Invicti Security, a global leader in web application security, has announced that it has added Interactive Application Security Testing (IAST) capabilities to Netsparker, its award-winning web application security scanner. The IAST sensor works hand-in-hand with Netsparker\u2019s Dynamic Application Security Testing (DAST) solution to provide [&hellip;]<\/p>\n","protected":false},"author":18,"featured_media":5925,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[17,43],"tags":[121,1803,1799,1802,1800,1801,292],"class_list":["post-5924","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-enterprise-security","category-top-stories","tag-cybersecurity","tag-ferruh-mavituna","tag-iast","tag-interactive-application-security-testing","tag-invicti-security","tag-netsparker","tag-security-2"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/posts\/5924","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/users\/18"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/comments?post=5924"}],"version-history":[{"count":7,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/posts\/5924\/revisions"}],"predecessor-version":[{"id":5932,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/posts\/5924\/revisions\/5932"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/media\/5925"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/media?parent=5924"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/categories?post=5924"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/tags?post=5924"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}