Apr 21, 2023

Code and Penetration Testing Leaders Joins Forces to Provide Comprehensive Attack Surface Management GrammaTech , a leading provider of application security testing products and software research services, and NetSPI, the leader in offensive security, announced a partnership to help customers automate product security for automotive, aerospace, medical device and other security and safety critical markets. Together, NetSPI’s offensive security solutions and the GrammaTech CodeSonar binary SAST (static application security testing) platform provide comprehensive visibility into and remediation for code security risks. . @GrammaTech and @NetSPI partner to offer defensive and offensive application security solutions. Code and penetration testing leaders joins forces to provide comprehensive attack surface management The companies are collaborating on go-to-market activities to provide customers with a single source for application security. GrammaTech and NetSPI offer an end-to-end solution to discover, prioritize, and remediate security vulnerabilities in both source and binary code. In addition, the GrammaTech CodeSentry binary SCA (software composition analysis) platform enables organizations to quickly understand supply chain risk in final or post production binaries, without requiring source code. GrammaTech will demonstrate its CodeSonar and CodeSentry SBOM products at RSA Conference 2023 at Booth 5300 in the North Expo, while NetSPI will be at Booth 5618 in the North Expo. “Ongoing cybersecurity awareness and evaluation is key to strong application security,” said Lauren Gimmillaro , VP of Business Development & Strategic Alliances at NetSPI. “Through our NetSPI and GrammaTech Partnership, we’re able to provide mutual clients with a proactive and continuous approach to application security testing by combining GrammaTech’s always-on SAST and SCA scanning offering alongside NetSPI’s comprehensive offensive security solutions.” “Together, penetration testing and application security testing provide comprehensive protection against safety and security vulnerabilities reaching market ready products,” said Tom van Gorder, Chief Revenue Officer for GrammaTech. “This partnership with NetSPI provides customers with a single source for accessing the industry’s leading code security solutions that span development, testing, feedback and deployment.” CodeSonar’s SAST analysis supports all leading product development languages (C, C++, C# and Java) in one unified platform. The platform supports the validation of coding standards and best practices including MISRA, JPL, CERT-C and static verification using formal method concepts to find defects including runtime errors, buffer overruns, API misuse, misuse of socket API, suspicious behavior, dead code and unused variables. It finds defects that impact software quality and security, and scales to meet the most rigorous real-world requirements, programs and processes. Meanwhile, the CodeSentry software supply chain security platform uses binary software composition analysis (BSCA) to enable organizations to detect security vulnerabilities contained in third party code. NetSPI’s Attack Surface Management (ASM) utilizes leading technology and our expert human penetration testing teams to continuously discover, inventory, test, and prioritize known and unknown assets and exposures on your global external attack surface. Our Attack Surface Ops team reviews and organizes results reducing burden on internal teams.