Services & Solutions

We build custom programs to secure every stage of your development life cycle.

Policy & Procedure

Services

- Maturity Assessments (OpenSAMM) 
- Policy creation
- Procedure creation

Infrastructure & Architecture

Services

Architectural standard creation such as: 
    - Encryption
    - Authentication
    - Authorization
    - Logging (SIEM integration)

Design

Services

- Architectural reviews
- Threat modeling 
- Threat modeling training
- Security Champion training

Develop, Test, Release

Services

- DevOps build pipelines
- Static scanning integration
- Dynamic scanning integration
- Open source scanning integration
- Developer to Security service request tracking (building a security help desk)
- DevOps Release (go/no-go automation)
- Executive Metrics (reporting to show which teams are in compliance with policy and viewing vulnerability statistics)

Infrastructure & Architecture

Services

- Continuous application monitoring
- SIEM Log integration
- Creates alerts when app is under attack 

Solutions

- Data Encryption (Voltage)
- Event Correlation AI (Respond Software)
- Log size reduction 

Solutions

- Static Analysis (Fortify and Checkmarx)
- Dynamic Analysis (WebInspect and Burp)
- Open Source Analysis (Sonatype)
- Pentesting (Cobalt)

Solutions

- RASP (Prevoty)
- Web App Firewalls (Imperva)
- Threat Detection (Respond Software)
-  Security Dashboarding (Saltworks SaltMiner)