Follow this workflow to manage application security risks in your organization.
Learn how to measure progress and demonstrate compliance.
Learn how to demonstrate compliance.
Learn about Industry standard report.
Learn how to create an application inventory.
Learn how to test vulnerabilities identified in an application.
Learn how to determine risks and prioritize vulnerabilities identified in an application.
Learn how to remediate risks identified in an application.
Learn how to track various metrics and trends of the applications that compose your portfolio.
You can generate customized reports (in PDF, HTML, or XML) for issues and send them to developers, internal auditors, penetration testers, managers, and the CISO. The reporting templates in AppScan Enterprise map application security data to key government regulations and industry standards. Use the reports to document progress towards regulatory compliance goals, such as showing a reduction in the number of application vulnerabilities that are associated with compliance issues.
Security reports can be large. During report generation, you might receive a warning message that the file is hundreds of pages long, or the report creation process might time out. Try the following tips to reduce report size.
Learn about Compliance report.
This report displays existing web application vulnerabilities that violate this standard control objectives. The control objectives as listed in this standard are directly derived from and aligned with the control objectives listed in ISO 17799.
This report displays NERC Cyber Security Standards issues found on your site. Many web application vulnerabilities might lead to security breaches of personal information, directly or indirectly, and might be considered as violations of the regulation.
This report displays NIST issues found on your site. Many web application vulnerabilities might lead to security breaches of personal information, directly or indirectly, and might be considered as violations of the regulation.
This report displays OWASP Top 10 2013 issues found on your site.
This report displays SANS/CWE Top 25 Most Dangerous Programming Errors issues found on your site. It matches issue types by CWE values. Many web application vulnerabilities might lead to security breaches of personal information, directly or indirectly, and might be considered as violations of the regulation.
This report displays WASC threat classification issues found on your site.