DEVOPSdigest

Synopsys announced two new collaboration agreements with NowSecure and Secure Code Warrior to expand its Software Integrity Group's portfolio of application security testing (AST) solutions.

Synopsys is introducing two new application security solutions leveraging these strategic partners: Synopsys Mobile Application Security Testing powered by NowSecure and Synopsys Developer Security Training powered by Secure Code Warrior. Both are available today worldwide.

"Partnering with two of the most prominent leaders in their respective areas of cybersecurity allows Synopsys' global roster of customers to stay ahead of the continually evolving threat landscape," said Jason Schmitt, general manager of the Synopsys Software Integrity Group. "The NowSecure automated mobile capabilities seamlessly complement Synopsys' industry-leading managed services in mobile application security testing to provide an unparalleled level of coverage and scalability. Additionally, reducing software risk must begin at the developer desktop, and Secure Code Warrior's developer-centric approach to security training has proven to be effective in embedding secure coding principles into an organization's development culture."

The Synopsys Software Integrity Group's strategic collaboration with NowSecure introduces an automated continuous mobile application security testing (MAST) solution purpose-built for securing the complex infrastructure of the modern mobile software development lifecycle (SDLC).

The new offering, designed to supplement Synopsys' industry-leading managed MAST services, provides testing coverage though rapid, automated and language-agnostic static, dynamic, interactive and API security testing of Android and iOS binaries.

Additionally, Mobile Application Security Testing allows development and security teams to analyze a mobile application's components—including open-source components, third-party software development kits (SDKs), and transitive dependencies—as well as implement standards-based automated security testing into continuous integration and continuous delivery/continuous deployment (CI/CD) pipelines.