SAN FRANCISCO, Feb. 25, 2013 (GLOBE NEWSWIRE) -- RSA Conference USA 2013 Booth #1431 -- Qualys, Inc., (Nasdaq:QLYS), a leading provider of cloud security and compliance solutions, today announced QualysGuard® WAS 3.0, adding malware detection and attack proxy support to provide customers and consultants with comprehensive web application security testing.
Recent studies confirm that attackers are increasingly targeting web applications to breach the security defenses of organizations. The Verizon 2012 Data Breach Investigation report indicates that for large organizations, 54 percent of the hacking vectors for the investigated breaches were associated with web applications. The report adds that attackers are increasingly using hybrid attacks, with 61 percent of all breaches featuring a combination of hacking techniques and malware.
A new case study with Microsoft describes how their Information Security & Risk Management (ISRM) Team uses QualysGuard WAS to evaluate the security of its hundreds of web applications coming online through its subsidiaries every year. In the case study, Ahmad Mahdi, ISRM manager at Microsoft, stated, "We needed a comprehensive way to evaluate the security of these applications with speed and accuracy…Thanks largely to QualysGuard WAS, we now have a process that ensures applications meet a specific and very important security threshold."With QualysGuard WAS 3.0, organizations can discover and catalog web applications on a global scale, then identify and remediate web applications vulnerabilities accurately and cost-effectively. QualysGuard WAS 3.0 provides malware detection for web sites, using advanced behavioral analysis to identify even zero-day malware that may infect users. The service proactively scans web sites for malware, providing automated alerts and in-depth reporting to enable prompt identification and resolution of vulnerabilities. Additionally, 3.0 introduces advanced scanning configurations and reporting enhancements including report creation wizard and scorecard reports based on asset groups or tags, making it easy for users to create and customize reports for the audience they are targeting.