Denim Group’s ThreadFix 3.0 Delivers Unified Vulnerability Management for Networking Infrastructure and Applications
The ThreadFix platform is used by the largest banking, technology, and telecommunications companies in the world to run application vulnerability management programs involving thousands of applications and tens of thousands of scanning results. Version 3.0 expands on these capabilities by correlating network vulnerabilities to provide organizations with an understanding of overall risk to business operations across applications and supporting networking infrastructure. ThreadFix’s consolidated security testing results gives security analysts the ability to report on the risk that applications and networks represent to the business. Teams will also gain increasing context to develop a rapid response plan to remediate associated risk. “Our goal is to provide organizations moving towards DevSecOps with the necessary security insight across both their applications and the infrastructure supporting these applications,” said Dan Cornell, CTO, Denim Group. “While application security remains critically important, the ability to ingest network vulnerabilities provides a full 360-view of risk to the business and enables a comprehensive approach to vulnerability management. By adding the network piece to our high-fidelity application merging capability, our clients now have unprecedented visibility into the true state of vulnerabilities in their environment.” The ThreadFix architecture has been substantially modernized, and now provides a microservices-based application that will help organizations handle significantly larger data sets and more frequent data upload volumes from DevOps CI/CD pipelines. The new architecture will assure smoother deployment and scales horizontally by deploying additional containers for services that are proving to be bottlenecks. ThreadFix’s bi-directional integration with defect tracking tools removes friction from the remediation process and has resulted in a decrease in mean-time to fix (MTTF) for vulnerabilities by up to 44%. As a result, organizations see rapidly reduced risk as the vulnerability exposure windows shrink. Additionally, ThreadFix provides access to powerful analytics, which enable security managers to take a quantitative approach to their application risk management programs and to make the most effective use of scarce resources. ThreadFix’s enhanced network vulnerability management capability includes support for Qualys, Tenable Nessus, and Rapid7 insightVM. Additionally, ThreadFix has native integrations with over 30 industry-leading SAST, DAST, IAST, and SCA scanning tools. Denim Group will be demonstrating ThreadFix 3.0 at the RSA Conference on March 5-7 in the North Expo Hall, booth #6184. To schedule a demo, please click here. About Denim Group Denim Group is the leading independent application security firm, serving as a trusted advisor to customers on matters of application risk and security. The company helps organizations assess and mitigate application security risk. Denim Group’s flagship ThreadFix platform accelerates the process of application vulnerability remediation, reflecting the company’s rich understanding of what it takes to fix application vulnerabilities faster.
“Our goal is to provide organizations moving towards DevSecOps with the necessary security insight across both their applications and the infrastructure supporting these applications”Tweet this