Wipro launches security testing with Fortify

Wipro Technologies has set up a software assurance center of excellence for on-demand and managed services along with Fortify Software Inc, a global player in enterprise application security solutions. The joint Wipro Software Assurance Center (SAC) will help assess and assure the security of client applications, a Wipro release said.

The SAC uses industry-leading Fortify 360 technology and will operate from Wipro's India and regional facilities in the US and EMEA (Europe, Middle East and Africa), delivering software assurance capabilities to global clients via managed Software-as-a-Service (SaaS) or on-demand models. SAC will allow organizations to proactively detect and mitigate risk from various threat sources, applying Fortify's technology, which uses a Software Assurance Score. The SAC can also validate an application's compliance to key regulations such as PCI, GLBA and HIPAA, the company said.

Vinod Muniyappa, Practice Head, Application Security, said that continuing compliance-related requirements and threat perceptions are driving the expansion of vulnerability management programs into the application space. "Traditionally, vulnerability management efforts have been focussed on desktops, servers and network devices, reacting to critical vulnerabilities through patch management programs. But now, companies are expanding their vulnerability management activities to include large enterprise applications, databases, externally facing Web applications and internally developed applications," Muniyappa said.

Wipro quoted a NIST (National Institute for Standards & Technology) study as saying that 92 per cent of network security vulnerabilities are found in software applications.