Synopsys redefines interactive application security testing with new seeker solution optimised for DevSecOps

Andreas Kuehlmann of Synopsys

Synopsys, Inc. announced the availability of the latest major Seeker release, an interactive application security testing (IAST) solution redesigned to enable DevSecOps and continuous delivery of secure web applications. Seeker integrates seamlessly into CI/CD pipelines and monitors web applications during preproduction testing cycles.

Using patented technology, Seeker is the only application security solution that detects and automatically verifies whether vulnerabilities are exploitable, providing developers with accurate, actionable information in real time.

“With 34% of developers saying they build multiple times per day or during check-in, application security testing must run in these same time frames or risk grinding the development machine to a halt,” wrote Amy DeMartine, principal analyst at Forrester Research. “Dynamic application security testing (DAST) has long been a burden for organisations trying to test security at development speeds.”

Seeker’s unique approach continuously mitigates application security risk in a tight feedback loop, complementing DAST scans and penetration tests that occur later in the development cycle and often require dedicated, out-of-band testing cycles and manual results verification and triage. To address software dependency risk, Seeker integrates Black Duck Binary Analysis (formerly Protecode SC) to automatically detect known vulnerabilities and license conflicts in open source components.

Seeker is also the only IAST solution that provides sensitive-data tracking to help achieve compliance with standards and regulations like PCI DSS and GDPR. Seeker is easy to deploy out of the box and supports large-scale, cloud-based, and microservices-based application architectures.

“Seeker is designed specifically for organisations embracing DevOps and leveraging automation to deliver continuous software improvements to their customers,” said Andreas Kuehlmann, general manager of the Synopsys Software Integrity Group.

“Due to its continuous monitoring, unrivaled accuracy, and contextualised remediation guidance, Seeker removes the manual elements of security testing and enables developers to take ownership of application risk.”

Key features of Seeker 2018.07 include:

  • Active vulnerability verification for unrivaled accuracy: Seeker is the only IAST solution that provides automated active verification to confirm that detected vulnerabilities are exploitable. This verification is achieved through patented technology that replays original HTTP(S) requests with tainted parameters and monitors the resulting application dataflow. The result is a near-zero false positive rate, which is significantly lower than that of other IAST and DAST solutions and reduces the cost of manual verification.
  • Sensitive-data tracking: Seeker is the only IAST tool that enables security teams to identify and track sensitive data, such as credit card numbers, usernames, and passwords, to ensure that it is handled securely and not stored in log files or databases with weak or no encryption. Sensitive-data tracking helps organisations comply with data security regulations including PCI DSS, HIPAA, and GDPR.
  • CI/CD integration and flexible deployment: Seeker can be deployed in virtually any type of automated or manual testing environment with minimal configuration required. Seeker fits seamlessly into CI/CD pipelines with native plugins and easy-to-use web APIs for bug tracking, build, and test automation tools. Seeker supports standard, microservices-based, and cloud-based application architectures and is scalable for large enterprise requirements.

Click here to learn more about Seeker for interactive application security testing and register for our upcoming webinar on Aug. 28, 2018.

Comment on this article below or via Twitter: @IoTNow_OR @jcIoTnow

FEATURED IoT STORIES

9 IoT applications that will change everything

Posted on: September 1, 2021

Whether you are a future-minded CEO, tech-driven CEO or IT leader, you’ve come across the term IoT before. It’s often used alongside superlatives regarding how it will revolutionize the way you work, play, and live. But is it just another buzzword, or is it the as-promised technological holy grail? The truth is that Internet of

Read more

Which IoT Platform 2021? IoT Now Enterprise Buyers’ Guide

Posted on: August 30, 2021

There are several different parts in a complete IoT solution, all of which must work together to get the result needed, write IoT Now Enterprise Buyers’ Guide – Which IoT Platform 2021? authors Robin Duke-Woolley, the CEO and Bill Ingle, a senior analyst, at Beecham Research. Figure 1 shows these parts and, although not all

Read more

CAT-M1 vs NB-IoT – examining the real differences

Posted on: June 21, 2021

As industry players look to provide the next generation of IoT connectivity, two different standards have emerged under release 13 of 3GPP – CAT-M1 and NB-IoT.

Read more

IoT and home automation: What does the future hold?

Posted on: June 10, 2020

Once a dream, iot home automation is slowly but steadily becoming a part of daily lives around the world. In fact, it is believed that the global market for smart home automation will reach $40 billion by 2020.

Read more
RECENT ARTICLES

AND Technology Research and University of Essex join forces to develop self-powering, battery-less IoT device powered by AI

Posted on: September 24, 2021

Purpose-led technology company, AND Technology Research, is announcing a new partnership with computer scientists from the University of Essex to explore new ways of reducing the amount of power a device needs, while at the same time using energy harvesting techniques to produce truly self-powering devices.

Read more

How can IoT optimise the bearing supply chain?

Posted on: September 24, 2021

In 2020, stock management issues were estimated to cost UK manufacturers 66 billion GBP  because of disruption caused by the pandemic. Consequently, the quest to improve efficiency, cut waste and enhance supply chain operations is one that suppliers know all too well. Here Chris Johnson, managing director at miniature bearings specialist SMB Bearings, explains how the Internet of Things

Read more