July 23, 2014 5:47 PM ET

Software

Company Overview of Application Security, Inc.

Company Overview

Application Security, Inc. develops and provides data security, risk, and compliance solutions for organization worldwide. The company’s software solutions discovers, assess, and reports on vulnerabilities, misconfigurations, and improper access controls within relational databases and big data stores. It provides DbProtect, a data security platform that uncovers database configuration mistakes, identification and access control issues, missing patches, and other toxic combination of settings, as well as enables organizations to secure their relational databases and big data stores. In addition, the company offers AppDetectivePRO, a database and big data scanner that detects configuration mi...

350 Madison Avenue

6th Floor

New York, NY 10017

United States

Founded in 2001

Phone:

212-912-4139

Fax:

212-947-8788

Key Executives for Application Security, Inc.

Chief Executive Officer
Age: 64
Co-Founder and Vice President of Corporate Business Development
Chief Financial Officer
Age: 70
Chief Technology Officer
Director of Security
Compensation as of Fiscal Year 2014.

Application Security, Inc. Key Developments

Application Security, Inc. Presents at 10th Annual East Coast Technology Growth Conference, Oct-15-2013

Application Security, Inc. Presents at 10th Annual East Coast Technology Growth Conference, Oct-15-2013 . Venue: Westin Copley Square, Boston, Massachusetts, United States.

Application Security, Inc. Announces Built-In Policy for FedRAMP Program as Part of Latest SHATTER Knowledgebase Release

Application Security, Inc. announced a new, built-in policy for FedRAMP as part of the SHATTER Knowledgebase KB 4.25 release. The policy will provide cloud service providers with a simplified process to become part of the Federal Risk and Authorization Program (FedRAMP). The Federal Risk and Authorization Program (FedRAMP) is a risk management program for large outsourced and multi-agency information systems established by the U.S. government. FedRAMP authorizes and continuously monitors IT services that are used by multiple federal departments and agencies, specifically cloud service providers. In order to be approved by FedRAMP, CSPs must continuously meet strict security guidelines. In order to be evaluated, an agency must sponsor the vendor's system/service and submit it to FedRAMP for review by a joint authorization board, which includes a FedRAMP Third Party Assessment Organization (3PAO). Once a CSP is approved by FedRAMP, all federal agencies within the program are able to use the product and/or service. AppSecInc products, AppDetectivePro and DbProtect, now have a built-in policy for FedRAMP. Any Cloud Service Provider (CSP) or Third Party Assessor for FedRAMP (3PAO) can use this policy as the basis for their database security assessments. Proper database scanning is one of the requirements of the program; CSPs must provide database scans that show results for vulnerabilities, configuration issues, weak passwords, missing patches, access control concerns, and other issues that can lead to user privilege escalation. Database scanning will show data is safe from internal and external threats. AppSecInc products automate continuous scanning required by the FedRAMP certification process and maintenance of the annual re-certification process.

Application Security Releases AppDetectivePro

Application Security, Inc. announced the latest release of its database scanning tool, AppDetectivePro. Expanded capabilities and a new user interface provide security, risk and IT audit professionals with best-in-class database vulnerability, configuration and access control assessment. The new tool allows organizations to quickly and easily understand their security posture and capabilities to proactively remediate vulnerabilities and protect sensitive information. AppDetectivePro enables easy and repeatable database security assessments, capturing results for all database security issues, ranked by risk, and generating comprehensive and customizable reports. Organizations are able to view vulnerabilities affecting compliance regulations, misconfigurations, identity and access controls, as well as issues that lead to privilege escalation. AppDetectivePro provides a unique vulnerability assessment that allows for both a pen test and audit. Through a pen test scan, AppDetectivePro provides a detailed view of vulnerabilities that could be potentially exploited by an attacker through an "outside-in" view. For a complete security review, AppDetectivePro's audit scan provides a deeper analysis of vulnerabilities and issues that could lead to privilege escalation exploits through an "inside-out" analysis. Audit scans are performed needing only a read-only account on the database. Beyond vulnerability assessment, AppDetectivePro provides a deep analysis of database configurations. Backed by AppSecInc's SHATTER knowledgebase, the industry's most complete library of database vulnerability and configuration issues, AppDetectivePro provides a detailed view of configuration issues, patch levels, and OS-related database issues. TeamSHATTER's knowledgebase is updated on a regular basis through AppSecInc's ASAP Updates, ensuring that the most recent vulnerabilities can be identified and remediated.

Similar Private Companies By Industry

Company Name Region
MobileX Labs LLC United States
CloudByte Inc. United States
MarkedUp, LLC United States
Logos Management Software, Inc. United States
Cognitor Inc. United States

Recent Private Companies Transactions

Type
Date
Target
Merger/Acquisition
November 11, 2013
--
 

Stock Quotes

Market data is delayed at least 15 minutes.

Company Lookup

Most Searched Private Companies

Company Name Geographic Region
NYC2012, Inc. United States
Lawyers Committee for Civil Rights Under Law United States
Bertelsmann AG Europe
Rush University United States
Greater Houston Partnership United States

Sponsored Financial Commentaries

Sponsored Links

Report Data Issue

To contact Application Security, Inc., please visit www.appsecinc.com. Company data is provided by Capital IQ. Please use this form to report any data issues.

Please enter your information in the following field(s):
Update Needed*

All data changes require verification from public sources. Please include the correct value or values and a source where we can verify.

Your requested update has been submitted

Our data partners will research the update request and update the information on this page if necessary. Research and follow-up could take several weeks. If you have questions, you can contact them at bwwebmaster@businessweek.com.