Archive for Invicti

New Research Finds 73% of Organizations will Increase AppSec investment in 2023 as Log4j Anniversary and Recession Looms

Posted in Commentary with tags on October 27, 2022 by itnerd

Invicti has released the firm’s latest research report, which found:

  • 73% of organizations anticipate that they’ll increase their AppSec investments in 2023.
  • 97% of DevSecOps teams say they ignore a real vulnerability at least once a month because they assume it is a false positive.
  • Developers are pushing code with known vulnerabilities due to pressure to deliver.

With the upcoming Log4j anniversary in early December, the 2 year anniversary of the SolarWinds attack and a recession pressuring security budgets, Frank has found that application security is a top priority for CISOs as nation-states, like China, scan for vulnerabilities as a prime attack vector.

You can read that research report here.

Time to Market Trumps Deploying Secure Apps, Developers Push Vulnerable Code to Keep Up: Invicti

Posted in Commentary with tags on September 20, 2022 by itnerd

Today, Invicti Chief Security Strategist Sonali Shah and ESG Analyst Melinda Marks published a new report, “Automated Application Security Testing for Faster Development”.

The report describes how:

  • With the move to the cloud, organizations need a seamless solution that gives them protection and coverage for all of their applications, not just certain business-critical applications. Otherwise, simple coding mistakes can leave them vulnerable to attacks that could compromise company or customer data.
  • A leading television service network serving 26 million viewers has deployed Invicti to help them deliver secure applications on time, enabling them to innovate while protecting information collected online, particularly the personally identifiable information (PII) of viewers and staff, as well as its own company data and intellectual property.
  • A global travel and vacations company uses Invicti to cost-effectively automate security testing for applications across its portfolio of companies, enabling developers to fix security issues within their workflows.
  • Invicti customers also reported time and cost savings with fewer security incidents and teams working more efficiently with security integrated with developer workflows.

The full report can be found here: https://www.invicti.com/clp/automated-application-security/.