Product Brief | TRUSTWAVE APP SCANNER ENTERPRISE

TRUSTWAVE APP SCANNER ENTERPRISE

APPLICATION SECURITY FOR CLOUD AND WEB APPLICATIONS

The longer a vulnerability remains exposed in a public-facing application, the more likely it
will be that an attacker identifies the flaw and exploits it. Trustwave App Scanner Enterprise is
on-premise dynamic application security testing (DAST) software that identifies vulnerabilities in
cloud and web applications. Use Trustwave App Scanner to maximize the efficiency and effectiveness
of your distributed team of IT, development and security staff that collaborate to manage risk across
your applications.

STAY AHEAD OF THE LATEST THREATS POWERFUL SECURITY ASSESSMENT BY ANYONE,

The release of hundreds of new threats into the wild each month
ANYWHERE, ANYTIME
challenges even the most sophisticated IT security professionals A Trustwave App Scanner Enterprise license allows you to test as
and application developers. Therefore, businesses must monitor many applications as you like – at whatever depth you like – at
their application security through a discipline of continual one fixed fee. Our distributed architecture allows users to scan
testing and re-testing. Trustwave App Scanner Enterprise helps applications and consolidate data from around the globe. Users
businesses take control of their application security programs. can then transfer data between software and cloud deployments
Whether by assessing applications prior to deployment or testing effortlessly thanks to a unified architecture across the entire
legacy apps in production, Trustwave App Scanner Enterprise Trustwave App Scanner family—App Scanner Managed, App
allows IT professionals to protect their applications and mitigate Scanner Cloud, App Scanner Enterprise or a combination.
the risk resulting from the constantly evolving threat landscape.
Whether you need to scan internal applications from inside the
firewall or external apps in multiple domains or geographies,
QUANTIFY RISK AND KNOW WHAT TO FIX FIRST Trustwave App Scanner’s flexible, modular architecture reduces
risk management complexities.
Your team will know exactly where to focus their effort to make
the most impact thanks to our proprietary scoring system that
quantifies the risk associated with each vulnerability. Stack SAVE TIME WITH MORE THOROUGH,
rankings make it easy for staff to spend time on the most
dangerous threats first. Our approach consistently delivers not
ACCURATE SCANNING
only high vulnerability discovery rates, but extreme accuracy so Illuminate the deepest recesses of even your most complex
that staff does not waste time chasing down false positives. applications with Trustwave App Scanner Enterprise’s spidering
capabilities and a browser plug-in for app traversal training.
The plug-in observes and records a user’s journey through the
application to ensure thorough assessment of all aspects of the
application with higher detection rates and lower false positives.
Our patented behavior-based technology eclipses a signature-
based approach to emulate a true hacker and maintain the state
of the application while attacking the application at the browser
level. Our approach identifies runtime vulnerabilities that might be
App Scanner missed in scanning strings of code.
Enterprise Dashboard
 Product Brief | TRUSTWAVE APP SCANNER ENTERPRISE

DEMONSTRATE EFFECTIVENESS OVER TIME INTEGRATION WITH COMPLEMENTARY

IT security professionals track trends and report on their
TECHNOLOGIES
effectiveness over time across any number of web applications Users can more quickly block, monitor and mitigate cloud and
and services with Trustwave App Scanner Enterprise’s web application vulnerabilities through Trustwave App Scanner’s
centralized, web-based reporting and risk management platform. integration with a number of complementary technologies:
The intuitive interface displays applications tested, vulnerability
trends, applications most at risk, and the performance of • Web Application Firewall (WAF)
business units tasked with remediating vulnerabilities. Users • Security Information and Event Management (SIEM)
can then understand what to fix first based on a prioritized
• Software Development Lifecycle (SDLC)
summary of vulnerabilities based on our own quantitative risk
scoring system. • Governance, Risk and Compliance (GRC)
Reports demonstrate company-wide progress on any number • Quality Assurance (QA)
of key performance indicators for executives and provide more • And other technologies
granular status updates tailored to the needs of more technical
staff. App Scanner Enterprise provides more than 26 reports
including templates specific to most major compliance regimes
including PCI DSS 3.0. WIDEST RANGE OF FORM FACTORS
If you want to free up staff resources, or need application security
assessment delivered via an on-demand platform, explore the
TRANSCEND THE TOP TEN rest of the Trustwave App Scanner family:
As one of the industry’s most expansive, Trustwave App Scanner
Enterprise’s library of over 128 categories of SmartAttacks drives App Scanner Managed – Managed service
its vulnerability discovery capabilities. Users select varying • Augment your team
levels of assessment depth depending on their objectives.
• Achieve fast, reliable results
They can measure resistance to attack or validate regulatory or
internal security compliance. Trustwave App Scanner Enterprise • Maximize budget for small number of critical apps
accurately identifies critical vulnerabilities such as application • Enable compliance
logic, cross-site request forgery, and privacy policy validation,
as well as, core vulnerabilities such as cross-site scripting, SQL
App Scanner Cloud – On-demand platform
injection and more.
• Nothing to install, scan immediately
• Unlimited scanning for duration of subscription
LOCK DOWN ACCESS ON A NEED-TO-KNOW BASIS • Low price options per application
Minimize risk while maximizing contributions from your team
members by governing access on a need-to-know basis with Managed Security Testing
role-based visibility. Managers give testers or programmers Full-on application penetration testing conducted by
access to only the applications for which they are responsible Trustwave SpiderLabs experts
and grant QA staff read-only access.

For more information: [Link]

Copyright © 2015 Trustwave Holdings, Inc.