-
Technology
-
Industry
-
Solutions
-
- ASSET MANAGEMENT
- CUSTOMER EXPERIENCE MANAGEMENT
- CYBER SECURITY
- DATA CENTER
- DOCUMENT MANAGEMENT
- ELECTRONIC DATA INTERCHANGE
- ENTERPRISE DATA MANAGEMENT
- ENTERPRISE RESOURCE PLANNING
- ENTERPRISE RISK MANAGEMENT
- ENTERPRISE-GRADE WEB DATA SOLUTIONS
- FACILITY MANAGEMENT
- FIELD SERVICE
- IDENTITY AND ACCESS MANAGEMENT
- INFRASTRUCTURE
- IT SERVICE MANAGEMENT
- MANAGED IT SERVICES
- PAYMENT AND CARD
- PROJECT MANAGEMENT
- SOFTWARE TESTING
- STORAGE
- VIDEO SOLUTIONS
- WORKFLOW
-
-
Platforms
-
Functions
- Leadership Perspectives
- Innovation Insights
- Research
- Magazines
- News
- CXO Awards
Tim Teitelbaum, CEO“Our unique value proposition in the DARPA challenge is just the beginning, and we are endeavoring to pave the way for advanced security solutions that enhance the functionalities of our existing tools,” extols Tim Teitelbaum, CEO, GrammaTech. With over 40 years of experience in software design and analysis, Teitelbaum’s unrelenting passion for pioneering cyber security solutions is spearheading GrammaTech to create a disruption in the programming code analysis landscape. Teitelbaum’s innovative researches focused on automatic program analysis laid the foundation of GrammaTech’s innovative code analysis solutions.
Since its inception in 1988, GrammaTech is at the forefront of providing innovative code analyzing solutions for securing software and enabling flawless application development lifecycle. Today, GrammaTech stands a mile ahead in the code analytics solutions landscape with CodeSonar, GrammaTech’s flagship Static Application Security Testing (SAST) tool. CodeSonar can identify bugs and vulnerabilities that can result in system crashes, unexpected behavior, and security breaches, resulting in a more secure software development lifecycle. “Developers can use our product for bug finding in the source code and binary code before they deploy the application. In fact, our binary static analysis tool can be used as a standalone analysis tool or integrated with CodeSonar’s source code engine,” explains Teitelbaum.
Developers can use our product for bug finding in source code and binary code before they deploy the application
Furthermore, CodeSonar is capable of analyzing third-party codes as well as applications for non-developers.The binary static analysis provides the user a much stronger guarantee that the vulnerabilities are well patched and the application is hardened.
With GrammaTech, the defense department no longer has to reach out to the developer or maintainer to make changes in the source code and undergo all the contractual issues associated with fixing an error in the source code of a program. GrammaTech’s technology has the potential to short-circuit all these processes and go directly to binary patching. “The promise is to offer a highly efficient method of taking the code base of any application and fixing the vulnerabilities in a more or less automated fashion,” states Teitelbaum.
While explaining the unique value proposition of GrammaTech, Teitelbaum recalls an instance when the firm won a NASA SBIR contract to deploy CodeSonar in the implementation of ten rules in coding that should be used by the code developers of the Mars Rover. GrammaTech provided a site license for CodeSonar at the jet propulsion lab and assisted NASA in removing vulnerabilities in the code for the MARS Rover before it was launched. With GrammaTech’s analysis software, NASA was able to resolve several issues associated with engineering practices that had adverse effects.
On their trajectory of evolution, GrammaTech is focused on developing advanced code analysis and cyber protection solutions that will enhance safety and security for their customers. “For the short term, we aim to launch new products based on the experience gained at the Cyber Grand Challenge,” concludes Teitelbaum.
GrammaTech Partners with ArmorCode to Deliver Vulnerability Management Orchestration Across Development Pipelines
Wednesday, April 26, 2023
GrammaTech CodeSonar and ArmorCode combine application vulnerability intelligence with AppSecOps workflows for end-to-end product security automation
BETHESDA, Md - GrammaTech, a leading provider of application security testing products and software research services, and ArmorCode, the leader in AppSecOps, today announced a technology integration partnership to help customers automate product security across development, testing, feedback and deployment. The GrammaTech CodeSonar® SAST (static application security testing) platform provides deep safety and security vulnerability intelligence to ArmorCode for orchestrating application security operations within CI/CD pipelines.
The companies are collaborating to offer integrated solutions for ensuring the safety and security of mission-critical automotive, aerospace, enterprise, and industrial products. GrammaTech will demonstrate its CodeSonar and CodeSentry SBOM products at RSA Conference 2023 at Booth 5300 in the North Expo, while ArmorCode will be in the Early Stage Expo South Level 2, Booth ESE-10.
“Unifying application security tools and intelligence to orchestrate operations across developer pipelines is central to preventing safety and security vulnerabilities from reaching market ready products,” said Katie Norton, Senior Research Analyst, DevOps & DevSecOps, IDC. “Together, GrammaTech CodeSonar and ArmorCode can enable customers to automate end-to-end DevSecOps workflows instead of stitching together often siloed processes.”
The integration of ArmorCode and CodeSonar provides customers a centralized 360 degree view of vulnerabilities in CI/CD pipelines and prioritizes them for resolution, which is essential for implementing DevSecOps across physically distributed development environments and for satisfying standards based coding practices such as MISRA for automotive products.
“As organizations across industries adopt DevSecOps to accelerate the delivery of software, the number of security vulnerabilities have increased exponentially. Furthermore, the security teams responsible for protecting the business are struggling to manage the risk and to keep pace with the speed of delivery,” said Mark Lambert, Chief Product Officer for ArmorCode. “This integration between GrammaTech CodeSonar and ArmorCode delivers the visibility and workflow automation these teams need to ship secure software and ship it fast.”
“Identifying and remediating security vulnerabilities in complex development environments that span multiple geographies can be challenging due to siloed data and workflows, which can lead to product delays or worse,” said Vince Arneja, Chief Product Officer for GrammaTech. “Together, CodeSonar and ArmorCode deliver deep visibility into vulnerabilities and automated orchestration capabilities to help customers improve the security of their code, while delivering safer products to market faster.”
The ArmorCode AppSecOps platform unifies vulnerability management to reduce the detection and remediation response time for security risks and minimize the disruption of software release schedules. It centralizes findings and remediations from hundreds of application, infrastructure, and cloud security tools; normalizes, de-dupes, correlates, and prioritizes data; automates critical vulnerability management workflows; and provides developers the information they need to quickly remediate problems.
CodeSonar’s SAST analysis supports all leading product development languages (C, C++, C# and Java) in one unified platform. The platform supports the validation of coding standards and best practices including MISRA, JPL, CERT-C and static verification using formal method concepts to find defects including runtime errors, buffer overruns, API misuse, misuse of socket API, suspicious behavior, dead code and unused variables. It finds defects that impact software quality and security, and scales to meet the most rigorous real-world requirements, programs and processes.
Company
GrammaTech
Management
Tim Teitelbaum, CEO
Description
Provider of software-assurance tools and advanced cyber-security solutions
