Challenge: Introduce application security in the software development cycle without slowing down delivery or compromising the security of an air-gapped environment.

Application security within air-gapped environments

It helps defense and federal government revolutionize the way end users address complex challenges and protect against evolving threats. The software development teams leverage an agile development methodology and, because of the sensitive nature of the solutions and its clients, all development takes place in an air-gapped environment, where security is maintained by physical isolation from unsecured networks.

Development cycles are generally becoming much faster, and software is becoming more complex. When the organization was looking for a solution to embed application security early in the development cycle, OpenText was one of the companies it turned to. With a significant percentage of defense organizations and federal government bodies already leveraging Fortify within their DevOps process to create a DevSecOps environment, it was a natural choice. The Software Asset Manager for the organization explains further: “Having that relevant experience within our specific industry means that we don’t have to worry about how Fortify will perform in an air-gapped environment. This requirement turned out to be an issue for quite a few of the other solutions we investigated.”

Read full story