Home Page | Skip to Navigation | Skip to Content | Skip to Search | Skip to Footer

OPSEC Partners

Application Security, Inc.

Product Version Certified: AppDetective 5.1
Certified for use with: Check Point Next Generation with Application Intelligence

Product Description: A network-based, vulnerability assessment scanner, AppDetective™ discovers database applications within your infrastructure and assesses their security strength. Backed by a proven methodology and extensive knowledge of application-level vulnerabilities, AppDetective locates, examines, reports and fixes security holes and misconfigurations. As a result, enterprises can proactively harden their database applications-the crown jewels at most any organization.

 
Key Features and Benefits
OPSEC Integration
Additional Information 		Clear
 
Company Description: Application Security, Inc. (AppSecInc) is the leading provider of application security solutions for the enterprise. Our products proactively secure enterprise applications at more than 400 organizations around the world. The industry's most complete line of security solutions for the application tier, AppSecInc products apply to applications the same vulnerability management methodology organizations use to secure their networks and general-purpose operating systems. By securing data at its source, AppSecInc solutions enable organizations to more confidently extend their business with customers, partners and suppliers.
 
Key Features and Benefits
  • Discovery and Inventory - accurately locates and identifies all of the databases/applications within your network.

  • Non-intrusive Penetration Testing and Security Audit - performed against discovered and targeted databases/applications in uncovering possible security weaknesses, vulnerabilities, and misconfgurations.

  • Easy-to-Use and Intuitive - Automated inventory, information gathering, and analysis features empower you with the security intelligence required to fully assess the security of your enterprise databases/applications.

  • Easy Management of Application Vulnerability Data and Remediation Efforts.
    • Reporting facilities to communicate application vulnerabilities and security holes throughout your entire organization.

    • Manage large amounts of application vulnerability data through vulnerability filtering capabilities.

    • Manage enterprise-wide application vulnerability remediation efforts.

  • Distributed Architecture for the Enterprise - AppDetective™ is the first application vulnerability assessment solution in the world that is designed to meet the scalability demands of large organizations with thousands of applications.
    • Distributed management and scheduling features enable an enterprise to assign and schedule vulnerability-testing tasks to remote AppDetective™ Engines, and to pull those results back to a central site for analysis and application remediation planning.

    • Application vulnerability assessment policies can be configured according to the needs of your organization throughout the enterprise. Policies can either be all-encompassing or customized to the specific needs of a separate business unit/workgroup.

  • Complementary and Compatible Security Solution
    • AppDetective™ picks up where other scanners fall short of a vulnerability assessment solution for databases/applications by providing a lightweight application discovery tool, penetration tester, and security auditor without the use of agents or extensive DBA privileges.

    • Integrates easily with existing industry standard security solutions, and is a great addition to any security "toolkit" for Security Practitioners, Database Administrators (DBAs), Internal/External Auditors, Consultants, or General System Administrators.

    • Meets CVE (Common Vulnerabilities and Exposures) Compatibility Requirements

  • Continuously Updated Application Security Knowledge Base through monthly ASAP™ Updates
OPSEC Integration
AppDetective uses the ELA API to send vulnerability assessment results to the Check Point SmartView Tracker. The integration between AppDetective and Check Point is designed for adminstrators to view the results of an AppDetective assessment as event logs in the Check Point SmartView Tracker. This allows organizations to have one centralized view of all security events within their IT infrastructure.
Additional Information

Sarbanes-Oxley and Application Security Datasheet [PDF]
AppDetective Advanced User Documentation
"Check Point Logging Properties Installation Guide" [PDF]
AppDetective Datasheet [PDF]
AppDetective Integration Diagram [PDF]
AppDetective Evaluation