Rational AppScan Source Edition

Stronger application security

• Identifies and remediates the root cause of data breach risk from security defects in the source code during the early stages of the application lifecycle.
• Builds automated security into development by integrating security source code analysis with automated scanning during the build process.
• Scans, triages and manages security policies; prioritizes assignment of results to security teams for vulnerability remediation.
• Delivers fast scans of more than one million lines of code per hour, allowing you to scan even the most complex enterprise applications.
• Uses string analysis to simplify the adoption of security testing by development teams.

Integration with existing applications

• Accommodates a broad portfolio of large and complex applications across a wide range of languages.
• Is built on open architecture to protect your existing investments.
• Integrates with defect tracking systems (DTSs), software configuration management and build management tools, dynamic analysis tools, and web application firewalls.

Improved compliance

• Lets you set, push and enforce consistent policies that can be used throughout your enterprise.
• Provides enterprise-wide metrics and reporting with a centralized policy and assessment database.
• Makes it easier for you to understand your threat exposure at the executive level for audit and compliance purposes throughout the software development lifecycle.