Data Theorem Launches Full-Stack AppSec Solution for Web Apps

The company launched Web Secure, an end-to-end solution to test and mitigate vulnerabilities in modern web applications that can attract cyberattacks resulting in data breaches.

Data Theorem on Wednesday introduced a new full-stack application security solution for security teams to perform a complete analysis and testing of modern applicationsOpens a new window and for constituents like APIs, cloud, HTML templates, web layers, microservices etc.

Modern web applicationsOpens a new window have become an essential part of the contemporary tech space. They have become a necessity in delivering a vibrant user experience while enabling developers with the scalability, interoperability, and re-usability potential.

Talking to Toolbox exclusively, Doug Dooley, COO of Data Theorem shared, “Organizations’ frustration has reached an all-time high due to the lack of quality security tools to support these new modern web application frameworks and SPAs.”

“Data Theorem’s web application security testingOpens a new window or AppSec solution can help teams in identifying whether the web application matches required security requirements to ward off attacks on web applications, which accounted for more than 43%Opens a new window of all cyber attacks in 2019.” Furthermore, Positive Technologies reported that 50 % web applicationsOpens a new window are still vulnerable to threats and data breaches. While this figure is lesser than 67% in 2018, it still indicates the scope the area presents.

Tech News: Average Company Value Drops by 7.2% When a Data Breach Occurs: iomartOpens a new window

Modern web applications are highly interactive and as such are made up of several parts constantly moving or ‘interacting’ with each other. One such part, JavaScript APIs (system API, process API and experience API) accounted for more than 83% web trafficOpens a new window in 2019.

This evolved architecture with such a high level of functional requirements calls for testing methodologies that bypass traditional approaches.

According to Dionisio Zumerle and Jeremy D’Hoinne, VP Analysts at GartnerOpens a new window , “Cloud-based workloads, inside containers, mobile applications and single-page applications cannot benefit from protection inside the perimeter. There is a need for an approach that understands relationships between applications and application components. Perimeter-based protection cannot follow the flow of data from application to application, from API to API and from microservice to microservice.”

Tech News: Cisco Patches Up Vulnerability in Webex That Risked Meeting DataOpens a new window

Web Secure by Data Theorem provides defense against attacks like SPA SQL injection, SPA XSS protection, and Toxic Tokens with consistent and automated inspection and detection in web applications. It features dynamic, run-time analysis capabilities that can be integrated with DevOps processes like Continuous Integration/Continuous Delivery (CI/CD) process.

Dooley further added, “The need for full-stack application security analysis is another gap that we address – and customers value that we keep it continuous and automated, meaning no consultants and manual pen-testing needed, which slows the DevOps process.”

Let us know if you liked this news on LinkedInOpens a new window , TwitterOpens a new window , or FacebookOpens a new window . We would love to hear from you!