Powered by back-end databases, Web 2.0 and SOA for Web services, the dynamic nature of Web applications creates new challenges for security and compliance. The widespread growth of Web applications and the business value they deliver attracts hackers and cyber criminals to target Web-based applications to steal data, disrupt operations and infect clients. Because of these risks, Web application security is a key requirement of PCI compliance.

IBM offers the most complete end-to-end Web application security solutions that help organizations pre-emptively find and remediate vulnerabilities, block attacks in real-time, and granularly control access to applications. This enables enterprises to find existing vulnerabilities and prevent new ones from being introduced, block attacks against existing vulnerabilities prior to being remediated, and ensure that only authorized personnel are accessing critical or sensitive applications and related data. IBM’s unique combination of software, hardware and services provides a solution that is tailored to each organization’s unique security requirements and corresponding business needs.

Vulnerability Testing & Secure Application Development

• IBM Rational AppScan

  Provides automated Web application scanning and testing for common vulnerabilities including WASC threat classification – such as SQL-injection, cross-site scripting, cross-site request forgery and buffer overflow – and intelligent fix recommendations to ease remediation. The AppScan portfolio includes solutions for developers, QA and security professionals as well as a hosted OnDemand SaaS offering for organizations looking to outsource their application security requirements.

• IBM Application Security Assessment

  Helps organizations minimize the risk of hackers causing damage to networks by performing a range of intrusion tests using the same techniques known to be used by hackers. Our security experts will thoroughly assess your applications, from both a technical and non-technical perspective, to determine security weaknesses. The result is a detailed report of findings and specific recommendations for remediating any vulnerability found.