Intelligent CISO Issue 38 | Page 61

S expansion of the Technology

Synopsys unveils Technology Alliance Partner Program at RSA Conference

New Intelligent Orchestration solution integrates seamlessly with CloudBees , GitHub Actions and other DevOps partner tools to facilitate automated security testing workflows .
ynopsys has announced the

S expansion of the Technology

Alliance Partner ( TAP ) segment of the Software Integrity Group ’ s new Global Partner Program at the RSA Conference . Synopsys is showcasing integrations between the company ’ s Intelligent Orchestration solution and technology partner tools , including CloudBees and GitHub Actions . With more than 40 DevOps ecosystem vendors currently engaged , the TAP program simplifies and accelerates partner integration with Intelligent Orchestration and other Synopsys application security solutions .
Recognised as a leader by independent analysts Gartner and Forrester , Synopsys provides the most comprehensive portfolio of application security solutions in the industry . Through the TAP program , development , DevOps and security technology providers can partner with Synopsys to integrate the company ’ s application security and risk management solutions with their products . These integrations make it easier for organisations to build automated application security controls into their existing DevOps toolchains .
Synopsys recently introduced its Intelligent Orchestration solution – a dedicated application security automation pipeline that integrates with popular DevOps tools to make security testing seamless and easy to manage for high-velocity development teams . Intelligent Orchestration integrations with CloudBees and GitHub Actions underscore the value the TAP program creates for customers .
Intelligent Orchestration with source code management
Popular source code management ( SCM ) tools , including Bitbucket , GitLab and GitHub , can integrate with Synopsys application security solutions to enable developers to automatically run security scans on their source code when changes are introduced .
“ GitHub Actions helps customers automate software development efforts from ideation to production rapidly ,” said Jose Palafox , Business Development Manager for GitHub . “ Security testing is an increasingly important part of that process , but it needs to happen seamlessly . With the Intelligent Security Scan Action , developers can leverage the power of Intelligent Orchestration to automatically and quickly initiate security scans .”
Intelligent Orchestration with continuous integration and delivery
Widely used continuous integration and delivery ( CI / CD ) tools like CloudBees , CircleCI and Bamboo can also integrate with Intelligent Orchestration .
“ We ’ re seeing more and more customers look to automate application security activities as part of their CI / CD pipelines ,” said Anders Wallgren , Vice President of Strategy for CloudBees . “ But with the accelerating pace of development and proliferation of security testing technologies , it can be difficult for them to manage the continuous stream of vulnerabilities without slowing down the pipeline . Through our strategic partnership with Synopsys and integration between our respective tools , CloudBees and Intelligent Orchestration , customers can utilise automation and risk-based intelligence to run the right tests at the appropriate stages in the pipeline , which can dramatically reduce unnecessary friction .” u intelligent SOFTWARE SECURITY www . intelligentciso . com
61