Application Security

Protect against the threat of attacks, data breaches and assess vulnerabilities. Try IBM AppScan Software at no charge!

Innovate with confidence

Today’s organizations rely on mobile and web applications to engage customers, improve employee productivity, and reduce costs. Without proper security, these applications can be susceptible to a security breach. Recent IBM X-Force® research revealed 43% of all security vulnerabilities last year pertained to web applications.

Press play to view video.IBM Application Security solutions can help you deliver and maintain secure mobile and web applications, by enabling you to build layers of protection throughout all phases of the development/operations lifecycle. Market-leading application security testing tools enable you to find and remediate vulnerabilities earlier in the development process – reducing the cost of building secure and compliant web and mobile applications. Once an application is deployed in production, complementary solutions for network and database security offer additional layers of application defense against external and internal threats. Integration with IBM security intelligence tools presents a unified view of all aspects of the security of an application, taking into account the security of the network, host and data. The result is a holistic perspective that empowers you to implement effective measures for protecting your applications and enhances your organization’s broader security and risk posture.

IBM is currently in the leader’s quadrants in the Gartner Magic Quadrants for both Static Application Security Testing and Dynamic Application Security Testing.

IBM Application Security solutions offer:

  • Static Application Security Testing (SAST) to identify and remediate web and mobile application vulnerabilities in source code
  • Dynamic Application Security Testing (DAST) to uncover web and mobile application vulnerabilities in live and pre-production applications
  • Automated correlation of static and dynamic analysis results
  • Industry-leading capabilities from the IBM Security Application Security Research team, such as Glass-box testing (a form of Interactive Application Security Testing (IAST)), JavaScript Security Analyzer, and Cross-site Scripting Analyzer, offer targeted analysis to key application security challenges
  • Support for modernizing your legacy applications, including source code analysis of COBOL and SAP applications
  • Comprehensive, multi-layered protection incorporated throughout the entire development/operations lifecycle via IBM Security AppScan, IBM Security Network IPS, IBM Guardium, and IBM QRadar Security Intelligence Platform

Additional application security resources

IBM Security AppScan trial

See how IBM Security AppScan can identify security vulnerabilities across your development lifecycle.

Try IBM AppScan

The 2012 Business Case for Data Protection

Check out the survey by the Ponemon Institute

Review the survey

Case study

White paper

Understanding application security: Approaches to secure legacy and modern software assets

Read the white paper

Glass box testing: Thinking inside the box

Read the white paper

Related solutions

Comprehensive application security solutions from IBM.

Provide preemptive protection to keep applications secure, protected from malicious use, and hardened against failure.

Featured application security products

All products - Application security

Application security resources

White paper

Close encounters of the third kind: Client-side JavaScript vulnerabilities

Read the white paper (PDF, 421.8KB)

Solution brief

Managing application security and regulatory compliance.

Read the brief

Demos

View the latest application security videos and demos

Watch the demo

Security paper

IBM X-Force 2012 trend & risk report

Read the report

Glass box testing

Thinking inside the box

Read the report

Contact IBM

Considering a purchase?

The New Frontier: Securing Mobile Applications

In this on-demand webcast, an IBM application security expert discusses mobile application security, including three types of mobile applications and the attack vectors that impact them.

Speaker: Omri Weisman, Manager, Application Security Research, IBM Security

Listen to the webcast

It’s a new IT world. How secure are your systems?

This new world brings the challenge of securing your systems and data in a perimeter-less environment.

Application security resources

Close [x]

Same product, new name!

The product you selected is now offered under a new name. The product page you will be taken to will reflect this new name.