The bank might evaluate Sanctum's software, he added. Other products have emerged to protect Web content. For instance, Gilian Technologies' Exit Control G-Server monitors data leaving a Web server to ferret out any modified content before it reaches the Web user. Entercept Security Technologies offers its Entercept 2.0 Security software, which hardens a server's operating system to protect against unauthorized access. But these products focus more on securing Web content by fortifying Web servers.
Sanctum is focused solely on beefing up application security.
Besides AppScan, Sanctum offers the AppShield proxy software, which analyzes outbound HTML pages to make sure that incoming HTTP requests comply with stated policy. Through its policy recognition engine, AppScan identifies known and unknown vulnerabilities to a site, such as hidden manipulation scripts. Updates to the attack simulation feature give IT managers a ranking of vulnerabilities by severity and success rates, said Izhar Bar-Gad, Sanctum's chief technical officer. With the latest improvements, IT operators can eliminate unnecessary scanning with user-defined filtering. AppScan 2.0 also generates predefined reports with information on how to fix each vulnerability.