San Jose, CA, April 14, 2009 The Security Consortium (TSC) and Ounce Labs today announced that they have partnered to add source code analysis to the TSC Safety to Deploy service. The partnership provides product companies and internal development with a comprehensive service to ensure product security. By combining theoretical analysis results with physical testing, TSC is able to focus testing using Ounce Labs source code analysis tool results, substantiate vulnerabilities and provide comprehensive recommendations to improve product security. Security breaches make news every day, and the pace of attacks is growing. Before purchasing your product, customers want assurance that you have tested for and repaired vulnerabilities. For internal development projects, you want to ensure the resulting code is safe to deploy. Traditionally, companies have relied on internal quality assurance testing to verify security, but this has proven inadequate. As a result, more companies are turning to source code analysis tools and third-party security validation. The partnership between TSC and Ounce Labs is responding to this market trend. Most source code analysis is done as a standalone task, often by internal resources without extensive experience or training. The findings from the analysis are often mitigated without knowing whether they led to actual vulnerabilities. Using expert Trusted Advisors™ (TAs) from TSC, companies can professionally set up, run and interpret source code analysis, then validate those findings through testing. Companies save time and money performing the analysis and fixing issues and can confirm product security for potential customers. "Ensuring product security is critical to winning sales and ensuring customer satisfaction,” noted Mark Kadrich, CEO of The Security Consortium. “Companies shouldn’t rely on internal quality testing that is completely inadequate to find security flaws or on source code analysis alone. Our expert TAs employing the Ounce Labs tool provide companies comprehensive source code analysis and product testing to demonstrate security and win sales." "We were founded on the idea that companies need to be able to easily identify and mitigate software risk,” added Gary Jackson, CEO of Ounce Labs. “The Ounce Labs and TSC partnership provides companies with not only the ability to rapidly identify vulnerabilities in their business-critical applications using the Ounce product, but the expertise to validate and remediate those issues to improve product security." The source code analysis service is available now from TSC as an add-on to Safety to Deploy testing. Contact TSC at http://www.thesecurityconsortium.net or info@thesecurityconsortium.net for more information. About The Security Consortium: About Ounce Labs, Inc.: The Security Consortium is a trademark of The Security Consortium, Inc. Ounce Labs is a registered trademark of Ounce Labs, Inc. in the United States and other countries. Other product or service names mentioned herein are the trademarks of their respective owners. |