The End of False Positives for Web and API Security Scanning?

July could positively disrupt and adrenalize the aged-fashioned Dynamic Software Security Scanning (DAST) current market, inspite of the coming holiday season. The pathbreaking innovation will come from ImmuniWeb, a international software security company, effectively acknowledged for, between other points, its absolutely free Local community Edition that processes more than 100,000 day-to-day security scans of web and cellular applications.

Now, ImmuniWeb declared that its new product – Neuron – is publicly offered. This would be yet another tedious push launch by a computer software vendor, but the folks from ImmuniWeb managed to incorporate a mystery sauce that you will unlikely be equipped to resist tasting. The DAST scanning company is flexibly accessible as a SaaS, and unsurprisingly incorporates all trendy capabilities normally marketed by competition on the rapidly expanding world-wide current market, spanning from indigenous CI/CD integrations to sophisticated configuration of security scanning, pre-programmed or authenticated tests.

But the groundbreaking characteristic is Neuron’s contractual zero untrue positives SLA, included into each individual client deal. You get your income back for each fake beneficial you location in your vulnerability scanning report – as simple as that – and binding by a legally enforceable contract. The SLA, even so, does not address trivial security warnings, these kinds of as misconfigurations of cookies or HTTP headers.

Furthermore, contrasted to a casino, you cannot get wealthy with the SLA – the dollars-back again provision is capped by your annual subscription selling price, producing feeling for everyone from a business enterprise standpoint. The SLA is valid for web apps, cloud-indigenous microservices, RESTful APIs and all other HTTP/HTTPS targets that you can scan in a single simply click from the consumer-friendly Neuron dashboard:

Another of Neuron’s video game-switching attributes is the limitless complex support out there for all customers at no added charge. If you have concerns about detected vulnerabilities or your computer software engineers have to have some aid with remediation of the findings, ImmuniWeb security analysts will be your Northern Star. Other security distributors generally demand for this selection separately as a high priced consulting company, building their margins on it. This perk can make Neuron’s price for cash extremely aggressive amid the unfolding inflation and looming economic downturn that will probable hit the cybersecurity marketplace as well.

Talking about price, we particularly liked Neuron’s packaging and licensing design that provides some refreshing versatility to the existing DAST industry. Alternatively of staying handcuffed to your goal domains in the course of your complete membership, you may dynamically change them – without the need of paying an excess dime – as lengthy as your web software or API continues to be the exact. This can be a budget-conserving solution for businesses that often move their targets amongst different environments prior to deploying their code into manufacturing. Of take note, Neuron’s integration with ImmuniWeb’s Attack Surface area Administration (ASM) giving would make quite a lot of sense both for DevOps and compliance groups: you can initially illuminate your shadow IT and neglected web belongings, and then increase your web software security tests software with a holistic and risk-centered testing plan.

In its special statement for The Hacker News, ImmuniWeb’s Main Architect mentioned that Neuron is just one of the important announcements prepared by the business for 2022. The Swiss-headquartered vendor has an bold roadmap to incorporate even extra goods to its portfolio, which presently covers over 20 utilizes circumstances spanning from cloud and cell security screening to Dark Web Checking. Consolidating threat intelligence and Dark Web information with your software security testing – appears to be yet another wise notion by ImmuniWeb: it is not truly worth to scan your web-site for XSS if you have hundreds of stolen qualifications uncovered on the Dark Web, allowing for undesirable guys to login. We frankly like the synergizing energy that ImmuniWeb System delivers to its clients in consumable and actionable method.

We will continue to keep an eye on ImmuniWeb’s rising market traction. Adhering to ImmuniWeb for numerous years, we believe that that these individuals can produce what they guarantee. Anyway, Neuron is really worth a consider with a totally free demo.

Observed this post attention-grabbing? Observe THN on Facebook, Twitter  and LinkedIn to go through far more distinctive content we post.

Some areas of this report are sourced from:
thehackernews.com