Risky Apps Don’t Stand A Chance: NowSecure Showcases Cloud-enabled NowSecure Lab
NowSecure Lab Adds Cloud to On-premises Mobile App Assessment Capabilities - Developers and Security Managers Can Now Take Advantage of Completely Automated Static Testing
Contact: Hannah LaCorte
Tel: (202) 240-7611
Email: [email protected]
For Immediate ReleaseApril 20, 2015 - 12:00 am
NowSecure, creator of the award-winning NowSecure mobile app, is proud to showcase its powerful NowSecure Lab䋢 mobile app assessment product at the 2015 RSA Conference, at its booth at North Expo #N3135. Building on its successful on-premises app testing solution, the company announced today that NowSecure Lab is now also available in both free and premium cloud editions. A beta of the fully-featured premium cloud edition is being offered at no cost for four weeks to those who sign up during the RSAC show dates April 20-24, 2015.
NowSecure, a mobile security company founded in 2009, enables global enterprises, government organizations and four of the five largest financial institutions with mobile app and device testing, analytics, forensics and user device protection products and services.
Leading developers and security analysts worldwide count on NowSecure Lab as a comprehensive solution for mobile app security assessments:
- Designed to test for security and privacy issues in owned and third party apps across the Secure Software * Development Life Cycle (SSDLC)
- Delivers streamlined app testing during development to preemptively eliminate risk before it affects organization and customers and improve overall efficiency
- Checks for issues in apps already publicly available in the app stores
- Provides the ability to control testing conditions both on-premises and in the cloud
- Can run unlimited tests and automated results in minutes
NowSecure Lab is available for on-premises testing with provisioned mobile devices (iOS and Android) as an advanced software suite running inside a virtual machine. Static, dynamic and behavioral mobile analysis tools are preinstalled and ready for immediate use. This on-premises solution allows full control of the testing conditions and enables the analyst to automate most of the security assessments. Lab also allows for unlimited testing on an unlimited number of applications.
For example, if an application transmits personal information such as a credit card or social security number unencrypted – or even using weak or easily-breakable encryption — NowSecure Lab dynamic on-premises testing will alert this vulnerability to developers and security administrators.
Now, the cloud edition increases the flexibility of NowSecure Lab and allows users to conveniently perform fully-automated static analysis in minutes. It features detailed reports, industry-standard mitigation recommendations and is compatible with leading continuous integration frameworks. Currently in in beta to capture user feedback, both free and premium editions are available.
The Best of Both Worlds — Available Both On-premises and In the Cloud
NowSecure Lab has traditionally been available as an on-premises solution which requires provisioning of dedicated computer and device hardware. This new version of NowSecure Lab makes it easy for anyone to test apps through a simple web interface.
For those wanting the power and control of an on-premises deployment and additional features such as dynamic analysis, NowSecure Lab remains available to download and install on a local workstation. Even better, the local install and cloud editions of NowSecure Lab will interoperate seamlessly in an upcoming product release which will be extremely beneficial for the large enterprise with multiple locations. This lets developers and security administrators log in to a portal to manage tests and assessments across both cloud and on-premises testing sites– from anywhere in the world.
NowSecure Lab’s cloud edition is also available in pricing models for every scenario — ranging from a free version with more limited functionality, to a full-featured premium version that includes an unlimited number of assessments for an app. Other industry app testing tools charge per assessment, which limits the ability of the the developer and analyst to freely assess mobile apps throughout their Secure Software Development Life Cycle (SSDLC).
When accessed through the cloud, NowSecure Lab will also soon integrate with Continuous Integration (CI) tools such as Jenkins, in order to run automated testing on each new build and immediately display results from inside the web interface.
NowSecure Lab Cloud Beta Now Available Free during RSA Conference 2015
To encourage trials of NowSecure Lab’s cloud beta, the premium edition is being made available for four weeks to those that register during the RSAC event, April 20-24 2015. Once signed up, the user will have four weeks of free access to NowSecure Lab’s premium cloud testing capability and be able to test unlimited Android public and debug apps as well as owned iOS debug apps.
“This new version of NowSecure Lab, with both on-premises and cloud-based capability provides our customers with the perfect combination of mobile app assessment flexibility and power,” explained Andrew Hoog, CEO and co-founder of NowSecure. “Whether you are a small developer creating a single app, or a security analyst evaluating hundreds of apps for widespread deployment, NowSecure Lab is there to minimize the risk of vulnerabilities.”
For more information about the many powerful NowSecure Lab features, please visit nowsecure.com.
As the recognized experts in mobile security and privacy, NowSecure protects the global mobile app economy and safeguards the data of millions of mobile app users. Built on a foundation of standards, NowSecure empowers the world’s most demanding organizations with security automation to release and monetize 30% faster, reduce testing and delivery costs by 30% and reduce appsec risk by 40%. Only NowSecure offers a full solution suite of continuous security testing for DevSecOps, mobile app supply-chain monitoring, expert mobile pen testing as a Service (PTaaS) and training courseware. NowSecure actively contributes and supports the mobile security open-source community, standards and certification including OWASP MASVS, ADA MASA, NIAP and is recognized by IDC, Gartner, Deloitte Fast 500, and TAG Cyber.