Secure Development

Security is part of Veritran's entire software development lifecycle. A Secure Software Development Lifecycle (SSDLC) accompanies every release from risk and requirements analysis through secure design, implementation, testing and deployment, reducing risk before applications reach production. The release process requires peer review and security validation before any version is published, and is supported by annual penetration testing performed by an independent third party. The program is mapped to the NIST Secure Software Development Framework (SSDF) and OWASP SAMM, and spans from design through offensive validation and ongoing team training. Because the Veritran platform is a standard product rather than custom development, every finding and its mitigation benefit all customers at once.