Cigital
| Company type | Private |
|---|---|
| Industry | Software security, Managed services |
| Founded | 1992 |
| Fate | Acquired by Synopsys |
| Headquarters | Dulles, Virginia , United States |
Area served | Global |
| Products | Application security assessments, Penetration testing, Architecture evaluations, SecureAssist (static analysis tool), Security training |
Number of employees | 400 |
| Parent | Synopsys (after 2016) |
Cigital was a managed services provider specializing in software security, with its main office located in Dulles, VA. The company’s portfolio included services such as application security assessments, penetration test execution, and architecture evaluations. Additionally, Cigital delivered instructor-led training focused on security and created tools like SecureAssist, a static analysis application designed to function as a security spellchecker for developers. Operating on a global scale, Cigital maintained offices across various U.S. cities and international sites, employing approximately 400 security professionals. The organization concentrated on reducing software-related risks for clients by offering thorough security solutions until its acquisition by Synopsys.
History
Established in 1992 with funding from DARPA, Cigital introduced ITS4 in 1999, recognized as the first static analysis tool worldwide. This innovation was licensed to Kleiner Perkins and subsequently became the foundation for Fortify Software in 2003. Hewlett Packard later purchased Fortify Software in 2010 for $300 million.
The Build Security In Maturity Model (BSIMM) originated as a collaborative initiative between Cigital and Fortify Software. This framework assists organizations in evaluating and comparing their software security practices.
In 2002, Cigital discovered a flaw in the Visual C++ .Net compiler associated with an ineffective GS compiler flag. Although the company’s method of disclosing this vulnerability attracted criticism, it maintained its stance given the issue's significance.
On November 30, 2016, Synopsys, a prominent firm in electronic design automation, completed its acquisition of Cigital.
Acquisitions
Cigital expanded its capabilities by acquiring IViz Security, a company focused on on-demand application penetration testing, in November 2014.
Later, in November 2016, Synopsys, Inc. announced the purchase of both Cigital and Codiscope to broaden its offerings in software security and testing services.
References