31 August 2021
Tool specific news: Company
Testwell CMT++/CMTJava
Testwell CTC++
GrammaTech CodeSentry
GrammaTech CodeSonar
Imagix
Events/Seminars
ALL NEWS
Newsletter
You wish to be informed about our latest product news and events?Register here for our Newsletter.
You will receive our news 2-4 times per year (cancellation of your subscription is possible at any time).
Your email and contact data will only be used for our newsletter and will not be forwarded to any other company.
Read our latest newsletter here.
GrammaTech CodeSentry v2.1 Available
(Ithaca/USA, Offenburg/Germany, 31 August 2021)
Version v2.1 of the Binary Software Composition Analysis tool CodeSentry is now available.CodeSentry v2.1 includes the following enhancements:
- The Binary Scan Vulnerability Report now includes a Table of Contents
- Support for the RPM Package Manager (.rpm) archive format
- Improved performance of the UI interface
- The Summary page can now be sorted by column
- Additional scan status information has been added to the Scan Results page
- Expanded version recognition of detected components
- Overall performance of the UI and services has been improved
GrammaTech CodeSentry v2.0 now Available
(Ithaca/USA, 5 July 2021)
Version v2.0 of the Binary Software Composition Analysis tool CodeSentry is now available.CodeSentry v2.0 includes the following new and updated features:
- Software Bill Of Materials (SBOM) now available in CycloneDX format
- Binary Scan Vulnerability Report – Additional detail and new Appendix Section
- 0-Day Vulnerability Detection (CWE Top 25 and many more)
- Support for new archive file formats
- Support for manually adding a product to the SBOM (Direct Add)
- Improved Component Match Detail information (formerly ‘Debug Information’ screen)
- User and API Token Management
Using GrammaTech CodeSentry and CodeSonar to improve Software Security and comply with IEC 62443
(Ithaca/USA, 18 May 2021)
Exida, a functional safety and certification partner of GrammaTech, has released a white paper on GrammaTech products titled“Using GrammaTech CodeSentry and CodeSonar to Improve Software Security and Comply with IEC 62443.” Exida is similar to TÜV, but based in the US and IEC 62443 is an upcoming standard that many customers in industrial automation are looking at. In order to develop secure code free of vulnerabilities, suppliers are increasingly following a secure development lifecycle to achieve these goals. The IEC 62443-4-1 standard (Security for industrial automation and control systems –Part 4-1: Secure product development lifecycle requirements) defines specific requirements for using a secure development lifecycle in the design, implementation, maintenance and testing of products used in industrial automation and control systems. Grammatech’s CodeSentry and CodeSonar tools can be used to help suppliers comply with this standard. The full report of the white paper is available from GrammaTech's website.
VDC Research Study Finds Only Half of IoT Projects are Testing for Software Security
(Bethesda/USA, 12 May 2021)
A research survey conducted by VDC Research on the state of software supply chain security testing is now available. Despite the fact that third party code in IoT projects has grown 17% in the past five years, only 56% of OEMs have formal policies for testing security. Meanwhile, when asked to rank the importance of security to current projects, 73.6% of respondents said it was important, very important or critical.The full report, Finding Sources of Security in the Complex Software Supply Chains of Tomorrow, is available from GrammaTech's website.
These were the 8th Static Analysis Days 2021
(Offenburg/Germany, 6 May 2021)
Experts from GrammaTech and Imagix from the USA and Verifysoft spoke during both days about refactoring, vulnerability detection, security holes and serious software bugs, complementarity of static and dynamic code analysis, security reviews and application as well as benefits of static code analysis for source code and binary code.
We have compiled some of the presentations for you: find out more now!
GrammaTech CodeSentry 1.4 now Available
(Ithaca/USA, 26 March 2021)
Version 1.4 of the Binary Software Composition Analysis tool CodeSentry is now available.Key new features in this release are:
- Binary Scan Vulnerability Report: A comprehensive report on N-Day vulnerabilities including a dashboard and detailed component and vulnerability info
- Expanded archive support: A wide range of archive formats are now supported, including .tar.gz, gzip, bzip, in addition to Windows .msi, .cab., and .msu files
GrammaTech Reports 2020 Business Results
(Bethesda/Maryland, 21 January 2021)
Despite the economic impact of the pandemic, GrammaTech today announced record business results for 2020 due to accelerating adoption of its CodeSonar® SAST product, demand for its new CodeSentry™ SCA product, and continued growth in its government research division.GrammaTech added more than 50 new global product customers for its Application Security Testing (AST) products and won nine major research contracts.
Meanwhile, the new software composition analysis tool CodeSentry is already being evaluated by Fortune 500 customers.
What is coming up next from GrammaTech - TechStrong.tv Interview with GrammaTech
(Ithaca/New York/USA, 19 November 2020)
Alan Shimel at TechStrong.tv sat down with Mark Hermeling on November 19 in this 18-minute interview to discuss all things GrammaTech and what is coming up next!
Speakers: Alan Shimel, Co-Founder and Editor and Chief of MediaOps, Security Blvd & Container Journal & Mark Hermeling, Senior Director of Worldwide Sales at GrammaTech.
Watch the interview here.
GrammaTech CodeSentry Product page