Veracode provides the only solution to assess binary code – the way attackers see it – enabling organizations to apply a common, holistic approach to secure both their mobile and server applications regardless of whether they are internally developed, purchased from a commercial vendor, outsourced or open source.

“Mobile applications are one of the fastest growing segments of the software market,” said Diana Kelley, principal analyst, Security-Curve. “Insecure software which processes sensitive data poses a risk to enterprises, regardless of the platform it is run on. Enterprises need to apply the same risk assessment and security analysis to mobile applications as they do to those housed in data centers.”

“Today, there isn’t a major financial institution, software vendor or healthcare provider that doesn’t leverage mobile devices as part of their extended enterprise,” said Matt Moynahan, CEO of Veracode. “These applications transact financial data, personally identifiable information (PII) and personal health information (PHI) and are subject to the same types of attacks that traditional software has been plagued with. Veracode’s support of mobile applications enables enterprises to protect their employee, customer and partner data through a single turnkey solution, while demonstrating our equal commitment to the open source and commercial ISV community to provide an easy and cost-effective way to achieve independent verification that they have taken proper care to meet mobile device security requirements of their corporate customers.”

The Verified by Veracode Software Ratings Programme is a quality indicator for the security level of applications and software components. By expanding this Programme to cover mobile software, providers of mobile applications can now protect their brand and platform with a consistent and automated security verification Programme for mobile applications developed internally or by third parties. Organizations who have achieved "Verified by Veracode" status have made reasonable efforts to demonstrate that they have taken due care to ensure the security of their applications and their software has been assessed against industry standards for software assurance.