Data-First Security Company Bearer Open Sources Its Static Application Security Testing (SAST) Solution

Quickly identify, assess, prioritize and remediate security risks and vulnerabilities with a fully customizable solution supported by a global open source community

Bearer, the data-first security software company, announced that it has made its application security technology available as open source software. During development, Bearer was tested on more than 20,000 open source projects.

AiThority Interview : AiThority Interview with Lori Anne, Director of Product Development & Management at Verizon

Bearer, now available as open source code (under the Elastic License), is a Static Application Security Testing (SAST) solution used by engineering and security teams across multiple industries with one customer alone protecting the private data of more than 75 million medical patients. Within minutes it assesses the OWASP Top 10 security risks in web applications and filters and prioritizes vulnerabilities based on their impact on sensitive data.

“Our goal is to help security and engineering teams ship secure software faster by focusing on what matters the most,” said Guillaume Montard, CEO and co-founder of Bearer. “We empower developers by explaining what the top issues are, why they matter and how to fix them. By making our code open source, we give developers complete control and understanding of our SAST solution, making it easy to customize, extend and take advantage of the rapid innovation cycles and support of a global community of developer peers.”

Read More Interview: AiThority Interview with Mario Ciabarra, Founder and CEO of Quantum Metric

Application security solutions available in the market today, and particularly SAST tools, are notoriously poor at measuring business impact, making it a huge challenge for overburdened and understaffed teams to effectively manage them to meet security and compliance requirements. At the same time, data loss and leakage are among most companies’ top concerns about their software technology stack. Bearer’s solution uniquely solves both problems by optimizing application security efforts on remediating issues directly impacting the security of sensitive data, effectively reducing the attack surface for the organization.

As a data-first solution, Bearer filters and prioritizes security risks and vulnerabilities by assessing sensitive data flows in code to highlight what requires urgent attention. Bearer is comprehensive and identifies122 different data types grouped in familiar categories like PI, PHI, and Personal Data.

 Latest Interview Insights : AiThority Interview with Jessica Stafford, SVP of Consumer Solutions at Cox Automotive

 [To share your insights with us, please write to sghosh@martechseries.com]