Rational AppScan Reporting Console

Enterprise visibility into risks

• Offers a scalable, enterprise architecture that centralizes vulnerability scan reporting for multiple applications.
• Presents dashboards and flexible reporting views to provide enterprise-wide visibility into risks and remediation progress.
• Includes more than 40 ready-to-use security compliance reports, including PCI Data Security Standard (PCI DSS), ISO 17799 and ISO 27001, HIPAA, GLBA, and Basel II.
• Provides continuous monitoring and aggregation of metrics to help ensure remediation and trend improvement over time.

Dynamic analysis and static source code analysis

• Imports dynamic analysis results from IBM Rational AppScan Standard Edition, Rational AppScan Tester Edition and Rational AppScan Build Edition software. Dynamic analysis takes a black box approach and sends multiple mutated HTTP requests to discover vulnerabilities.
• Imports static source code analysis results from IBM Rational AppScan Source Edition and Rational AppScan Build Edition software. Static analysis involves modeling execution flows from the application’s source code and tracking inputs.
• Enables broader coverage of application vulnerabilities and increased accuracy from correlated results by using both techniques in application testing processes.

Enhanced collaboration among stakeholders

• Provides role-based reporting access and scan permissions to help enforce test polices.
• Enables easy communication of security status and specific security problems to various stakeholders.
• Delivers tools designed for each stakeholder to enhance collaboration among information security, development, quality assurance and management.