Leading DoD and Pentagon IT and Systems Integration Organization Leverages Agentless Database Security, Risk and Compliance Solution for DISA Audits

15:15 GMT, November 2, 2009 NEW YORK | Application Security, Inc., the leading provider of database security, risk and compliance (SRC) solutions for the enterprise, today announced that ASM Research, Inc., an information solutions integrator and leading provider of innovative technology solutions for the federal government, has standardized on AppDetectivePro. ASM Research has deployed AppDetectivePro’s agentless database scanning technology for database discovery and vulnerability assessment to meet compliance requirements.

With tens of thousands of licenses shipped worldwide, AppDetectivePro is the de facto standard for database SRC audits. AppDetectivePro discovers, examines, reports and proposes fixes for database security vulnerabilities and misconfigurations. The solution provides ASM Research with the automated audit and reporting functionality its Department of Defense (DoD) and Pentagon customers require to comply with the latest DISA database configuration requirements.

Because it is agentless, AppDetectivePro can be rapidly implemented and provide immediate time to benefit. The solution provides auditors, IT advisors and internal audit teams with detailed compliance reports and a comprehensive view of an organization’s database asset inventory, vulnerability profile, access controls and entitlements to sensitive information.

“Our clients include many of the largest Department of Defense agencies, so it’s critical that we offer the analytics and reporting capabilities required to comply with DISA STIG policy standards,” said Orlando Ferreiras, Director of Security, Information Assurance Services, ASM Research, Inc. “We selected AppDetectivePro because of its comprehensive coverage of the DISA STIGs, and its enhanced access control mining capabilities, which are the most comprehensive in the industry.”

AppDetectivePro has long set the standard for database vulnerability scanning, assessment and compliance capabilities. As the de-facto standard solution for DISA STIG (Defense Information Systems Agency – Security Technical Implementation Guide) database assessments, AppDetectivePro provides auditors and IT advisors with the checks and control processes necessary to gain compliance and obtain the market’s most comprehensive multi-platform coverage.

“With over thirty years experience in providing information assurance solutions to the federal government agencies, ASM Research understands the requirements to successfully scan and audit databases,” said Dave McNamara, vice president of Americas sales, Application Security, Inc. “AppDetectivePro eliminates manual processes and ensures that their client database audits address the compliance requirements of the DISA STIGs.”