IBM Application Security on Cloud is a software-as-a-service offering that provides the ability to scan web applications, mobile applications, and desktop applications in a fast and easy manner. The service identifies security issues in an application, and produces a detailed security report. The report includes detailed remediation guidance that can be followed by developers.
IBM makes available Application Security on Cloud Consulting Services, an add-on service offering that provides expertise from IBM consultants to assist clients with their application security needs. Examples of the types of services include:
- Fast Start. Provides expertise and guidance to help assure success using the Application Security on Cloud testing and risk management features.
- Assessment Review. Provides assistance reviewing test results that include understanding and prioritizing the remediation of vulnerabilities in the application.
- Scan for Me. Provides a "concierge" scan service where the consultant:
- Configures and runs the scan.
- Validates the results.
- Provides recommendations on remediation prioritization.
- Conducts a walk-through of the results with the client.
- Application Penetration Test. Provides an IBM Penetration Tester who conducts controlled tests to identify vulnerabilities that automation alone cannot discover
- Advisor on Demand. Provides direct interaction with experts on client-specific application security needs, such as program management, configuration, vulnerability remediation assistance, code analysis and repair, and more.
Clients can purchase a quantity of Consulting Services Engagement Units as add-ons to their Application Security on Cloud subscription. For the duration of the Application Security on Cloud subscription period, these Engagement Units can be used flexibly to request and receive any combination of consulting services. This depends on the number of Units these services require. Each type of service uses a defined number of Engagement Units.
For additional information on Application Security on Cloud, refer to Software Announcement 216-088, dated March 15, 2016.
LATEST COMMENTS
MC Press Online