Developer-focused security company Snyk said it has acquired Helios, a startup focused on helping developers troubleshoot applications in runtime and production.
While security testing such as static analysis and software composition analysis are important for identifying vulnerabilities in the application before they reach production, runtime context provides information on how the application is actually behaving in production.
The Snyk-Helios combination will provide security teams with a comprehensive perspective of application risk spanning the entire software development lifecycle, from code to cloud, Manoj Nair, Snyk's chief product officer, wrote in a memo announcing the acquisition.
External configurations in the deployment environment could influence the application's behavior, and Snyk will be able to provide insights into how the application is interacting with the environment.
The combination of the two companies would provide Snyk customers with improved asset discovery, issue identification, and risk prioritization.
Snyk will integrate Helios' end-to-end application discovery service and OpenTelemetry-based run-time data collection tools into its AppRisk service.
AppRisk is designed to help application security teams work together with developers to govern their security program.
With this integration, customers will have security context from all phases of development, from when code is built, compiled, and deployed, Snyk said.
Snyk customers will have access to end-to-end application discovery to gain a holistic visibility of the organization's entire application environment; risk-based prioritization to determine where to focus remediation efforts; and full-stack runtime data collection to provide a comprehensive picture of all applications in runtime.
The runtime data collection techniques will allow Snyk to build a framework for collecting and incorporating runtime data into AppRisk, Nair said.
This marks Snyk's second acquisition in the area of developer-led application security posture management, following its $32.7 million acquisition of Enso Security for $32.7 million back in June.
The Enso Security acquisition added prioritization and remediation capabilities to Snyk's platform.
The entire Helios team is expected to join Snyk's research team.
This Cyber News was published on www.darkreading.com. Publication date: Wed, 17 Jan 2024 01:05:18 +0000