Breach Security’s New WebDefend Combines Security with Ultimate Flexibility for Enterprise-scale Deployments

2009-06-22 14:22:02 -

Breach Security, Inc., the leader in web application integrity, security and PCI compliance, today announced the latest release of its flagship WebDefend™ web application security appliance, version 3.6. Designed to provide enhanced support to large-scale deployments, WebDefend now offers advanced enterprise-wide reporting and the industry’s most robust protection against security risks in Web 2.0 technologies, including Asynchronous JavaScript (AJAX), Rich Internet Application (RIA) clients, Real Simple Syndication (RSS), Extensible Markup Language (XML) and Simple Object Access Protocol (SOAP). The new WebDefend provides advanced support for next-generation websites and applications to protect critical business information, ensure an optimum user experience, and safeguard corporate reputations by preventing hacking attacks and data leakage.

With the proliferation of Web 2.0 technologies, developers are adding new interactive capabilities that make websites more engaging for users.

Typical websites now feature dynamic content and the ability to subscribe to blogs and other content via RSS feeds, an XML based standard. Developers use XML to create web pages with content that is easier to reuse in other applications or presentation environments. SOAP is becoming the XML-based transport mechanism of choice for enabling online transactions and data exchange to occur. Through this transformation, new vectors of attack have opened up that compromise customer data and other confidential information. Cross Site Request Forgery (CSRF), XML Poisoning, Web Services Definition Language (WSDL) Scanning, and Cross-Site Scripting (XSS) in AJAX are just some of the new vulnerabilities found in next-generation web technologies.

WebDefend v3.6 offers the industry’s most robust capabilities for full bi-directional parsing of XML and blocking of XML-based attacks. The system allows for schema validation and automatically profiles XML applications, which creates a positive security validation for every XML/SOAP property and enables real-time identification of security vulnerabilities and application integrity issues. WebDefend also protects against XML poisoning attacks, XML external entity attacks and WSDL scanning. WebDefend’s console profile tab provides detailed information into real-world use of XML by the application, helping both developers and IT security staff.

“With the release of WebDefend v3.6, Breach Security has proven once again to offer the best product on the market,” said David Hostetter, IT Admin for TranDotCom. “Breach continues to consistently stay at the forefront of industry innovation by listening to clients and quickly developing features designed to help them achieve even greater web application security.”


WebDefend also protects applications by automatically tracing malicious accesses to pages on the web sites that should be accessed only after a proper login process is done. Using its leading application profiling engine, WebDefend v3.6 introduces enhanced methods to detect the latest web application threats such as CSRF, HTTP Verb Tampering and forceful browsing.

“The nature of web application threats continues to evolve as Web 2.0 technologies become commonplace in large enterprise applications,” said Sanjay Mehta, senior vice president for Breach Security. “Only WebDefend provides full bi-directional inspection of all web traffic flows delivering unprecedented insight into application traffic, the best attack detection and prevention available, and the capability to ensure online customer satisfaction and successful web transactions.”


About WebDefend

WebDefend is an advanced web application security solution that offers customized, behavior-based analysis for each protected application. Only WebDefend uses a patented profiling system and multiple, collaborative detection engines to ensure the flow of business-critical traffic while supplying complete protection for applications to keep the organizations’ confidential information safe from targeted attacks.
WebDefend uniquely provides non-intrusive, effective security for multi-application environments while continuing to provide full blocking capabilities. In 2008, WebDefend has been praised for its accurate attack detection and prevention, ease-of-use, performance and targeted Payment Card Industry features in reviews by major industry publications including SC Magazine and Information Security magazine.


About Breach Security

Breach Security, Inc. is the leading provider of real-time, continuous web application integrity, security and compliance that protects sensitive web-based information. Breach Security’s products protect web applications from hacking attacks and data leakage, and ensure applications operate as intended. The company’s products are trusted by thousands of organizations around the world, including leaders in finance, healthcare, ecommerce, travel and government. For more information, please visit www.breach.com : cts.businesswire.com/ct/CT?id=smartlink&url=http%3A%2F%2Fwww .. .



Schwartz CommunicationsJill Reed or Clinton Karr, +1-415-512-0770 breachsecurity@schwartz-pr.com : mailto:breachsecurity@schwartz-pr.com