Type Private Area served Worldwide Motto Building Security In | Industry software security Founded 1992 | |
Number of locations Atlanta, Bangalore, Bloomington, Boston, Chicago, Dallas, Minneapolis, New York, Santa Clara, Seattle, London Services Architecture Analysis, Ethical Hacking, Penetration Testing, Static Analysis, Training, Policy Development Headquarters Dulles, Virginia, United States Profiles | ||
Cigital is a software security firm, based in Dulles, VA. Services include application security testing, penetration testing, and architecture analysis. Cigital also provides instructor-led security training and products such as SecureAssist, a static analysis tool that acts as an application security spellchecker for developers.
Contents
History
Cigital was established in 1992 with grants from DARPA In 1999 the firm created ITS4, which according to Cigital, was the world's first static analysis tool. The technology in this product was eventually licensed to Kleiner Perkins and used as the basis for the creation of Fortify Software in 1999. In 2010, Fortify was acquired by Hewlett Packard for $300 million.
BSIMM (Build Security In Maturity Model) is a software security measurement framework that helps organizations compare their software security to other organizations. BSIMM was started as a joint project by Cigital and Fortify Software.
In 2002, Cigital announced finding a vulnerability in Visual C++ .Net compiler (related to a GS compiler flag being inefficient). Cigital was criticized for not following responsible disclosure in this case, however, Cigital has defended its position due to the nature of the vulnerability.
Products
Cigital SecureAssist identifies security bugs within the IDE and provides custom guidance to developers in reducing defects in future development. BuildSecure eLibrary is an online portal containing a suite of software security training classes. Enterprise Security Portal tracks identified security bugs and checks for omissions to ensure a thorough analysis of the software. Cigital has published 20 books and research articles on software security. In 2009, they found that poker games such as Texas Hold 'em involve considerable skill.
Clients
Cigital serves numerous Fortune 500 and Fortune 100 companies, including American Express, Aetna, Bank of America, Intuit, JP Morgan Chase, and Avis.
Acquisitions
In November 2014, Cigital acquired IViz Security an information security company which is into on-demand application penetration testing.
In November 2016, it was announced that Synopsys, Inc. would be acquiring Cigital and Codiscope.