WebInspect (DAST)

The potential impact of hybrid analysis–combining dynamic and static testing methods–is clear.

You get the advantages of each – the vulnerability confirmation in a dynamic test with the application coverage, root-cause analysis, and line-of-code detail of static analysis. This breakthrough combines WebInspect’s advanced dynamic application security testing technology with the real-time application security technology of Fortify SecurityScope.

When used in together, WebInspect and Fortify SecurityScope can stimulate the application through automated, external security attacks, and then gather internal, code-level vulnerability information by observing the attacks in the code as they happen. You can now uncover real issues more quickly, determine root cause and deliver more actionable results to development for remediation.

With WebInspect Real-Time you can inspect parts of the application that it may not find through normal crawling, collect information about the internal behaviors of an application during dynamic tests and detect new types of vulnerabilities. As a result you filter out false positives, confirm vulnerabilities and provide the development team with more actionable details, such as stack trace and line of code detail.