Verizon Business Launches Web Application Vulnerability Scanning Service

PRESS RELEASE

BASKING RIDGE, N.J. " As hacker attacks become more sophisticated, businesses of all sizes are struggling to protect their Web-based applications. With Verizon Business' new Application Vulnerability Scanning (AVS) solutions, however, businesses can better understand, identify and mitigate potential Web-based, application-security threats.

Available in November in the U.S., Canada and 13 countries in Europe and Asia-Pacific regions, AVS is offered on an annual subscription basis via the software as a service (SaaS) model. This enables customers to purchase individual applications of the service. Three different solutions " baseline, standard and premium " offer service levels based on the size, complexity and profile of the customer's Web site. A complementary service will also allow customers to remediate risks using Web application firewalls that Verizon Business can monitor and manage.

AVS is a key component in Verizon's Application Security Program, which provides a programmatic approach to enterprise application security. The new AVS solutions offer companies a systematic way of safeguarding applications through a comprehensive three-pronged approach focusing on visibility (the ability to clearly see applications that may be at risk), flexibility (the ability to accurately prioritize assessments within tight budgets), and control (ensuring that managed Web application security processes are using mature, repeatable and consistent methods).

"Protection of Web-based applications tops our customers' security wish list, and rightly so as more companies Web-enable their corporate applications," Dr. Peter Tippett, vice president of innovation and technology at Verizon Business. "With our AVS service, Verizon Business will provide an enterprise-class solution that can easily and reliably be deployed without the need for expensive custom testing programs."

New Services Target Vulnerabilities Where it Counts

According to industry experts, nine out of 10 Web sites have at least one serious vulnerability that leaves them susceptible to being hacked. The Verizon Business "2009 Data Breach Investigations Report" found that of the 285 million compromised records from the 90 confirmed breaches studied, 79 percent were compromised via Web applications. The report also demonstrated that online data accounted for 99.9 percent of breached records.

Verizon Business' new AVS services deliver accurate, customizable Web site vulnerability information through an online dashboard that identifies and verifies customer threats and severity ratings using an advanced assessment methodology that virtually eliminates false positives. AVS can also help customers meet the PCI DSS (Payment Card Industry Data Security Standard) application-security testing requirements.

All three AVS solutions leverage WhiteHat Security's leading application vulnerability management SaaS platform.

Verizon Business uses its Web application firewall (WAF) capability to provide the company's complementary service to remediate risk. Once AVS has identified potential application security risks, Verizon Business can translate these risks into rules that are applied to the customer's application firewall to immediately block attacks. Customers can choose to manage their own WAF, or outsource it to Verizon Business.

Verizon Cybertrust Security

The Verizon Application Vulnerability Scanning service is part of Verizon Business' industry-leading portfolio of security solutions, aimed at helping enterprises and government agencies manage security risk and protect critical company assets. The portfolio includes governance risk and compliance solutions, data loss and prevention solutions, identity management solutions, and managed security services. The company's more than 1,100 security professionals around the globe deliver these offerings through a range of managed services, professional services and technologies, based on what best suits the customer. More information is available by visiting http://www.verizonbusiness.com/us/products/security.

About Verizon Business

Verizon Business, a unit of Verizon Communications (NYSE: VZ), is a global leader in communications and IT solutions. We combine professional expertise with one of the world's most connected IP networks to deliver award-winning communications, IT, information security and network solutions. We securely connect today's extended enterprises of widespread and mobile customers, partners, suppliers and employees - enabling them to increase productivity and efficiency and help preserve the environment. Many of the world's largest businesses and governments - including 96 percent of the Fortune 1000 and thousands of government agencies and educational institutions - rely on our professional and managed services and network technologies to accelerate their business. Find out more at www.verizonbusiness.com.