A solution that's ideal for security teams that lack time, budget and staff

Sep 19, 2013 17:56 GMT  ·  By

NT OBJECTives has enhanced its NTOSpider On-Demand scanning service. The service constantly monitors applications and automatically conducts a comprehensive security test when changes are detected.

“By their nature, web applications are constantly changing, leaving security teams pressed to keep up with the security testing of newly changed web applications,” noted Dan Kuykendall, co-CEO and CTO of NT OBJECTives.

“But in the interest of time and resources, they are only testing the part of the application that has been changed, and in some case may not know about the change, leaving it completely untested,” Kuykendall added.

“Not testing changes at all can certainly result in security vulnerabilities, but it’s important to note that partial application security testing is also ineffective. Changes in one piece of an application can have a cascading effect, directly compromising the security of other parts of the application.”

Users can set the intervals at which they want the solution to perform the security tests.

The software monitors applications for changes, and when one is detected, a security scan is launched. NTOSpider can be highly efficient because it doesn’t only scan the changed output, but the entire application. A detailed report containing the identified issues is generated on each scan.

Security teams will no longer have to worry about monitoring changes in their organization’s applications. Considering that some companies may own hundreds or even thousands of applications, the continuous scanning feature can be highly useful.

Since it’s a cloud-based platform, NTOSpider On-Demand doesn’t require organizations to install or manage any additional software.

NT OBJECTives says the solution is favored by many enterprise application security teams that lack budget, time and staff to design and implement their own programs.