Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Application Security

2/27/2019
08:15 AM
Dark Reading
Dark Reading
Products and Releases
50%
50%

ThreadFix Delivers Vulnerability Mgmt for Network and Apps

Vulnerability correlation capabilities provide complete visibility of risk to associated business operations and supports enterprise reporting.

SAN ANTONIO--(BUSINESS WIRE)--Denim Group, the leading independent application security firm, today announced the latest version of ThreadFix 3.0, which will allow organizations to manage their application security programs and address risks to business operations that could be affected by vulnerabilities in the networking infrastructure. Designed for developers and security professionals, the ThreadFix platform delivers time-savings for security analysts by reducing application vulnerability counts by 35% and, as the owner of two patents for Hybrid Analysis Mapping, is the first platform able to correlate SAST and DAST results without requiring a runtime agent. Featuring an updated user interface and architecture, consolidated security testing results, and powerful analytics, ThreadFix 3.0 provides industry-best merging capabilities with network vulnerability visibility to provide a complete picture of risk.

The ThreadFix platform is used by the largest banking, technology, and telecommunications companies in the world to run application vulnerability management programs involving thousands of applications and tens of thousands of scanning results. Version 3.0 expands on these capabilities by correlating network vulnerabilities to provide organizations with an understanding of overall risk to business operations across applications and supporting networking infrastructure. ThreadFix’s consolidated security testing results gives security analysts the ability to report on the risk that applications and networks represent to the business. Teams will also gain increasing context to develop a rapid response plan to remediate associated risk.

"Our goal is to provide organizations moving towards DevSecOps with the necessary security insight across both their applications and the infrastructure supporting these applications," said Dan Cornell, CTO, Denim Group. "While application security remains critically important, the ability to ingest network vulnerabilities provides a full 360-view of risk to the business and enables a comprehensive approach to vulnerability management. By adding the network piece to our high-fidelity application merging capability, our clients now have unprecedented visibility into the true state of vulnerabilities in their environment."

The ThreadFix architecture has been substantially modernized, and now provides a microservices-based application that will help organizations handle significantly larger data sets and more frequent data upload volumes from DevOps CI/CD pipelines. The new architecture will assure smoother deployment and scales horizontally by deploying additional containers for services that are proving to be bottlenecks.

ThreadFix’s bi-directional integration with defect tracking tools removes friction from the remediation process and has resulted in a decrease in mean-time to fix (MTTF) for vulnerabilities by up to 44%. As a result, organizations see rapidly reduced risk as the vulnerability exposure windows shrink. Additionally, ThreadFix provides access to powerful analytics, which enable security managers to take a quantitative approach to their application risk management programs and to make the most effective use of scarce resources.

ThreadFix’s enhanced network vulnerability management capability includes support for Qualys, Tenable Nessus, and Rapid7 insightVM. Additionally, ThreadFix has native integrations with over 30 industry-leading SAST, DAST, IAST, and SCA scanning tools. Denim Group will be demonstrating ThreadFix 3.0 at the RSA Conference on March 5-7 in the North Expo Hall, booth #6184. To schedule a demo, please click here.

About Denim Group

Denim Group is the leading independent application security firm, serving as a trusted advisor to customers on matters of application risk and security. The company helps organizations assess and mitigate application security risk. Denim Group’s flagship ThreadFix platform accelerates the process of application vulnerability remediation, reflecting the company’s rich understanding of what it takes to fix application vulnerabilities faster

Kate D. Shapiro

kate@golaunchtech.com

(410) 698-5211

LaunchTech Communications

www.GoLaunchTech.com

Twitter  | LinkedIn  | Facebook 

 

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Exploits Released for As-Yet Unpatched Critical Citrix Flaw
Jai Vijayan, Contributing Writer,  1/13/2020
Microsoft to Officially End Support for Windows 7, Server 2008
Kelly Sheridan, Staff Editor, Dark Reading,  1/13/2020
Active Directory Needs an Update: Here's Why
Raz Rafaeli, CEO and Co-Founder at Secret Double Octopus,  1/16/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
The Year in Security: 2019
This Tech Digest provides a wrap up and overview of the year's top cybersecurity news stories. It was a year of new twists on old threats, with fears of another WannaCry-type worm and of a possible botnet army of Wi-Fi routers. But 2019 also underscored the risk of firmware and trusted security tools harboring dangerous holes that cybercriminals and nation-state hackers could readily abuse. Read more.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-15625
PUBLISHED: 2020-01-18
A memory usage vulnerability exists in Trend Micro Password Manager 3.8 that could allow an attacker with access and permissions to the victim's memory processes to extract sensitive information.
CVE-2019-19696
PUBLISHED: 2020-01-18
A RootCA vulnerability found in Trend Micro Password Manager for Windows and macOS exists where the localhost.key of RootCA.crt might be improperly accessed by an unauthorized party and could be used to create malicious self-signed SSL certificates, allowing an attacker to misdirect a user to phishi...
CVE-2019-19697
PUBLISHED: 2020-01-18
An arbitrary code execution vulnerability exists in the Trend Micro Security 2019 (v15) consumer family of products which could allow an attacker to gain elevated privileges and tamper with protected services by disabling or otherwise preventing them to start. An attacker must already have administr...
CVE-2019-20357
PUBLISHED: 2020-01-18
A Persistent Arbitrary Code Execution vulnerability exists in the Trend Micro Security 2020 (v160 and 2019 (v15) consumer familiy of products which could potentially allow an attacker the ability to create a malicious program to escalate privileges and attain persistence on a vulnerable system.
CVE-2020-7222
PUBLISHED: 2020-01-18
An issue was discovered in Amcrest Web Server 2.520.AC00.18.R 2017-06-29 WEB 3.2.1.453504. The login page responds with JavaScript when one tries to authenticate. An attacker who changes the result parameter (to true) in this JavaScript code can bypass authentication and achieve limited privileges (...