HP Application Security Center
| Company type | Division product line |
|---|---|
| Industry | Software, Information security |
| Predecessor | SPI Dynamics |
| Founder | Hewlett-Packard |
| Products | HP Assessment Management Platform, HP WebInspect, HP QAInspect, HP DevInspect (discontinued) |
| Parent | HP Software Division |
HP Application Security Center (ASC) was a collection of technology solutions offered by the HP Software Division, primarily originating from HP's acquisition of SPI Dynamics. This software suite empowered developers, quality assurance teams, and security professionals to conduct web application security testing and implement fixes. These offerings have now been incorporated into the HP Enterprise Security Products lineup within HP's Software Division.
Products
The HP Application Security Center portfolio consisted of:
- HP Assessment Management Platform (AMP), designed to oversee web application security testing throughout the application lifecycle
- HP WebInspect, a tool for evaluating and testing web application security
- HP QAInspect, which provided standardized security assessments during the quality assurance (QA) phase
In May 2008, HP introduced the HP Application Security Center as a Software as a Service (SaaS) product, alongside other new releases.
By September 2009, HP phased out the HP DevInspect products that were previously part of ASC. DevInspect was aimed at individual developers by integrating with development environments like Microsoft Visual Studio (.NET), Eclipse, or IBM Rational Application Developer (Java). The company shifted its strategy to concentrate on solutions targeting entire development teams rather than single-user tools.
Benefits
The solutions within HP Application Security Center helped detect and address security weaknesses in web applications throughout the software development lifecycle (SDLC). Early identification of vulnerabilities enabled organizations to minimize web-based attacks and flaws, with over 80 percent of these issues residing within the web application itself rather than server or infrastructure components.
Additionally, the platform produced compliance documentation for more than 20 regulations and standards, including PCI DSS (Payment Card Industry Data Security Standard), a widely recognized global information security framework established by the Payment Card Industry Security Standards Council.
More Information on Application Security
- Application security
- SQL injection
- Cross-site scripting
- PCI DSS Payment Card Industry Data Security Standard