SAP to resell HP Fortify as part of expanded agreement

HP has announced that SAP will resell HP Fortify application security software as part of its quality assurance solutions portfolio.

SAP is now offering the solution under the name SAP Fortify software by HP, aiming to help customers quickly identify and address software vulnerabilities.

HP says the threat landscape is growing more sophisticated and targeted, making it critical to identify and mitigate vulnerabilities before they can be exploited. "With the recent high frequency of breaches, organisations are now realising the importance of proper application security testing, and the need for these solutions is continuously increasing," the company says.

As an expansion to a longstanding reseller relationship, SAP Fortify by HP enables SAP customers to identify, triage and fix vulnerabilities in production applications, while also helping reduce risk by enabling security to be built in during software development.

"An organisation can suffer significant financial loss, business interruption and brand damage should it detect a vulnerability too late," says Jason Schmitt, vice president and general manager, Fortify, Enterprise Security Products, HP. "With SAP Fortify by HP, SAP customers can now enhance the management of their software security risk by enabling proactive security testing throughout the entire software development lifecycle.

Application security helps strengthen SAP's quality assurance portfolio of solutions, allowing users to identify vulnerabilities early in the software development process, which is critical when attempting to combat potential cyber-attacks.

Using static application security testing (SAST) analysis and dynamic application security testing (DAST) solutions from HP, SAP Fortify helps provide an immediate, accurate picture of software risk across the enterprise so customers can isolate problem areas within their organisation as early as possible.

The offering delivers detailed reference information on the vulnerabilities to both developers and testing teams with instructions for correcting issues, enabling them to quickly patch weak spots and to help prevent future concerns of a similar nature.

"SAP and HP enjoy a long-standing relationship with a strong focus on quality assurance," says Tom Roberts, global vice president, Third-Party Solutions, SAP. "Offering software that integrates code-vulnerability analysis across the entire software life cycle, securing applications wherever they are deployed – on premises, in the cloud or on mobile devices around the world – is another important step in helping our customers increase productivity, lower costs and accelerate time-to-market.

SAP Fortify integrates with other SAP testing solutions, including the SAP Quality Centerapplication by HP and SAP LoadRunner application by HP.  It can also be used with the SAP Solution Manager application management solution to comprehensively manage software security issues across the enterprise.