Armorize Solutions

CodeSecure™

HackAlert™

SmartWAF™

Security On Demand

SAAS

Malware Detection

Source Analysis

Research

Academic Papers

Resources

Vulnerability DB

(Tel) 1-408-216-7893
(Fax) 1-408-583-4288

info@armorize.com
For products and sales
related queries, write to
sales@armorize.com

Redherring.tv: "without security our enterprises can't gain trust" says Armorize COO, Matt Huang. View the interview

RSA 2007:  Wayne Huang, CEO of Armorize gave a speech on "Automated Web Application Vulnerability Detection Using Static Analysis" Read more

24/7 SaaS: HackAlert™ service.

Sign in to @rmorize  |  Sign Up

Home >> Products >> CodeSecure™

CodeSecure™ White Box Static Source Code Analysis 





CodeSecure™ is based on award-winning 3rd Generation technology which, combined with its ease of installation, configuration and management makes it the most advanced, most effective, and most comprehensive Source Code Analysis solution on the market.

• Web-based automated Static Source Code Analysis and Verification platform.
• Onboard compiler for assessment of Java, PHP, ASP and .NET web application source code.
• Appliance-based browser-accessible solution requires no additional hardware, software installation or integration with build server.
• Ease of installation and configuration with minimal overheads and maximum scalability across the enterprise
• Detects vulnerabilities early in the Software Development Life Cycle (SDLC) such as Dataflow attacks, Cross Site Scripting (XSS), Injection (SQL, File, XPATH, reflection, etc.), File Inclusion/execution & Information Leakage.
• Non intrusive source code scans pinpoint the exact vulnerability providing a trace between the vulnerable entry point and the line of code that caused it. This allows developers to see the direct relationship between their coding practices and the overall security posture of the application.
• Enterprise interface and IDE-integration ensure that vulnerabilities are identified, understood and remedied with minimal cost and impact on project progress.

CodeSecure™ is available as an enterprise-level appliance or as a hosted software service.

For more information, download the CodeSecure™ Brochure

CodeSecure™ Verifier

At the heart of the CodeSecure™ environment is CodeSecure™ Verifier. This enterprise-level pattern-free, static source code analysis and verification appliance offers the following:

• Centralized source code analysis platform for developers, managers and security personnel
• Simultaneous scanning of multiple projects across multiple platforms and programming languages
• Ease of installation, setup and integration with the source code repository
• Integration with development processes ensuring a code security mindset from the outset.

For more information on CodeSecure™ Verifier platform, download the CodeSecure™ Verifier Datasheet

With its built-in support for PHP, JAVA, .NET and ASP, CodeSecure™ does not require any integration with the build server. Once the appliance is on the network, source code scanning projects are set up through the browser interface in 5 easy steps.

• Create project specifying language type & source code location
• Set Scanning policies
• Run on demand scan or set schedule
• Set reporting options (Detail, format, distribution, etc.)
• Run the Scan

CodeSecure™ Workbench

CodeSecure™ Workbench, designed for the individual developer offers source code analysis from within the developer IDE.

• Plug-in downloaded directly from CodeSecure™ Verifier, integrates with developer IDE
• Leverages the appliance's enterprise-level resources to scan developer's code
• Provides an easily navigable desktop environment in which source code vulnerabilities can be detected, analyzed and removed.
• Desktop level scans can be controlled by enterprise-level policies
  

Download the CodeSecure™ Brochure and Datasheet



 Digg this     Save to del.icio.us     Print page