Latest Release of JFrog Xray Helps Customers Dynamically Assess the Relevance, Impact & Needed Remediation for Security Vulnerabilities, Speeding Time to Resolution
JFrog Ltd. , the Liquid Software company and creators of the JFrog DevOps Platform, introduced advanced contextual analysis security capabilities in JFrog Xray, the company’s DevSecOps solution. A proof point of the integrated roadmap following its Vdoo acquisition, the new JFrog Xray features allow customers to more precisely determine the threat level and relevance of common vulnerability exposures (CVEs), leading to more rapid and accurately-prioritized remediation. Together with JFrog Artifactory, this Xray release provides a holistic, automated, scalable solution to find, replace, recover, and prioritize hazardous CVEs.
Latest Aithority Insights: Broadband Service Providers Can Prove They Deliver the Fastest Speeds to Subscribers
@JFrog unveils new JFrog Xray contextual analysis capabilities, providing dynamic CVE assessment at the binary level to help speed time to resolution. #cybersecurity #DevSecOps #Xray
Rather than spending time and resources on researching or solving each new CVE based on the common vulnerability scoring system (CVSS), JFrog Xray’s contextual analysis capabilities take an intelligent approach to software scans at the binary level, painting a more complete picture of the applicability and danger of each vulnerability. Knowing whether a particular CVE is relevant to your environment and easily exploitable will help already over-stretched DevSecOps teams quickly pinpoint and address their most critical security gaps. Because JFrog Xray is part of the JFrog Platform, once a vulnerability is identified, customers can securely build, distribute, and connect the required software updates from end to end.
“We are thrilled to offer customers an integrated platform approach for quickly determining each CVE’s applicability and risk, then deploying the appropriate remediation,” said Nati Davidi, SVP, JFrog Security. “With so many vulnerabilities these days, customers need solutions that help them focus on what actually needs protection. By providing binary-level detection of each vulnerability, Xray’s contextual analysis helps developers and security teams make more informed decisions about a particular vulnerability’s impact so they can confidently and quickly execute remediation plans, while reducing overhead.”
Browse The Complete News About Aithority: Wrike Sets A New Standard For Secure Hybrid Workspaces
In a world where software vulnerabilities and attacks are increasing at unprecedented rates in terms of both volume and sophistication, industry research indicates the average time needed for businesses and agencies to fix security vulnerabilities grew from 197 days to 202 days over the first half of 20211. Traditional software composition analysis (SCA) tools can often find hundreds of vulnerabilities in a single scan, giving development teams the arduous task of determining which vulnerabilities truly matter. Using advanced binary scans of container images, JFrog Xray’s contextual analysis delivers a more accurate picture of what vulnerabilities exist, if they are relevant, and/or easily exploitable – enabling developers and DevSecOps teams to prioritize efforts and resources for swift remediation.
Identification and assessment of relevant contextual factors such as the existence of a reachable path to the vulnerable code, or a configuration variable that affects the CVE applicability, typically require extensive manual analysis by security experts. This approach cannot meet the needs of modern businesses to secure at DevOps speed and scale. As a recognized Certified Numbering Authority (CNA), JFrog’s Security Research team continuously monitors, identifies, and analyzes both existing and emerging CVEs to determine if they are likely to be exploited by real-world attackers. With JFrog Xray, customers benefit from this extensive research, which offers clarity on how the vulnerability can be exploited and clear guidance on remediation tactics, delivered through an automated, scalable platform.
Read More About Aithority News : Elastic and Amazon Reach Agreement on Trademark Infringement Lawsuit
[To share your insights with us, please write to sghosh@martechseries.com]
Comments are closed.