PCI DSS

Parasoft supports PCI DSS section 6 compliance by:

• Providing out-of-the-box checking for the security issues referenced in PCI DSS section 6: The solution is configured to deliver an instant assessment of compliance with PCI DSS section 6 security guidelines. This enables teams to rapidly assess the level of compliance–without spending time reading the PCI DSS specification and determining how the requirements translate to code.
• Establishing an automated process that integrates security throughout the SDLC: Audits are necessary, but true success in application security requires an in-line process to prevent security vulnerabilities and ensure that the application adheres to the organization's security policy. Our automated infrastructure makes security policy application, management, and monitoring an unobtrusive part of the team's existing workflow–from the start of the SDLC. Problems are reported as they emerge, so they can be resolved when it is fastest, easiest, and least costly to do so.
• Facilitating issue remediation, not just issue detection: Each issue detected is prioritized, automatically correlated to the developer who introduced it, then distributed to his or her IDE with direct links to the problematic code. Eventually, developers start writing more secure code as a matter of habit. Moreover, through integration with the development infrastructure, results are correlated with requirements, bugs, and source code changes–converting data into actionable information.
• Delivering extensive reporting for documentation and process improvement: Our centralized reporting system provides real-time visibility into overall security status and processes, documents improvements, and helps you determine what additional actions are needed to safeguard security.