HP Introduces Industry's First Application Self-Protection As-a-Service Solution

WASHINGTON, DC--(Marketwired - Sep 9, 2014) - HP (NYSE: HPQ) today introduced HP Application Defender, the first cloud-managed application self-protection service managed that provides immediate visibility and actively defends production applications against attacks. 

As the number and complexity of enterprise applications grows, the attack surface for exploits increases exponentially, leaving enterprises even more exposed. Traditional methods of protecting applications can take significant time to implement and are focused on software that is in development -- they don't protect applications running in production. Additionally, with more than 80 percent of successful breaches occurring at the application layer,⁽¹⁾ it is clear that installing simple perimeter defense to protect production software lacks effectiveness.

To prevent attacks from within the application, HP Application Defender leverages runtime analysis technology to monitor activity in the runtime environment to detect and prevent real-time attacks. The introduction of the HP Application Defender as a Software-as-a-Service platform allows any size organization to protect applications against advanced threats without significant investment in security resources.

"With vulnerabilities like cross-site scripting and SQL injections affecting 53 percent of applications,⁽²⁾ there has not been an easy and effective way to help enterprise applications protect themselves -- until now," said Jason Schmitt, general manager, Fortify, Enterprise Security Products, HP. "Through a first-of-its-kind application self-protection service, HP Application Defender brings simplicity to application security, enabling organizations to automatically identify and protect against software vulnerabilities in real time -- stopping what no one else can even see."

Whether an organization has two applications or 2,000, HP Application Defender seamlessly scales to meet their security needs. By providing a simple installation process and a cloud-based management platform, HP Application Defender allows time- and resource-constrained security professionals to identify and stop attacks quickly and effectively, without changing code or installing another device on the network.

Enabling users to efficiently manage and report security data in real time, HP Application Defender boasts easy-to-use interactive dashboards and alerts that give detailed information on the nature of an attack and where it occurred. HP Application Defender provides intelligence from inside the application runtime that helps developers fix the issue permanently in the source code, while it is virtually patched in the production environment.