Software program Intelligence firm Dynatrace has prolonged its Software Safety Module to detect and shield towards vulnerabilities in runtime environments, together with the Java Digital Machine (JVM), Node.js runtime, and .NET CLR.
As well as, Dynatrace has prolonged its help to purposes operating in Go, one of many fastest-growing programming languages, with adoption rising by 23 p.c final yr.
With these enhancements, the Dynatrace® platform turns into the one resolution offering real-time visibility and vulnerability analytics throughout all the software stack, which incorporates customized code, open-source and third-party libraries, language runtimes, container runtimes, and container orchestrators. Dynatrace not solely identifies vulnerabilities throughout every of those layers routinely but in addition analyses them to supply actionable and exact solutions out-of-the-box. This empowers growth and safety groups to evaluate danger higher, prioritise and remediate threats extra successfully, and innovate sooner and with elevated safety.
“We’ve got a proud heritage as a cloud-native enterprise that harnesses agile supply practices, the most recent know-how, and a state-of-the-art, safe growth lifecycle to convey steady innovation to our prospects,” mentioned Luca Domenella, head of cloud operations and DevOps at Soldo.
“Dynatrace Software Safety helps to make this potential by giving us complete visibility and analytics throughout all layers of our complicated software ecosystem, guaranteeing no vulnerability escapes our safe DevOps lifecycle. As well as, it helps us immediately perceive the chance and potential influence of zero-day vulnerabilities, corresponding to Log4Shell, and routinely prioritises the steps required to resolve them. This protects our groups from losing weeks triaging alerts and allows them to resolve new vulnerabilities in simply days or much less, to allow them to keep centered on innovating.”
Language runtimes are a essential layer of the applying stack as they guarantee apps can be found and well-executed on any platform with out having to be rewritten or recompiled. By extending its Software Safety Module to help runtimes in probably the most broadly adopted programming languages, Dynatrace delivers the trade’s most complete software vulnerability evaluation, spanning all potential entry factors in pre-production and manufacturing environments.
“The variety of entry factors attackers use to focus on purposes continues to increase. Vulnerabilities can creep into purposes from any a part of the software program provide chain, together with open-source or third-party parts and software runtimes,” mentioned Steve Tack, SVP of product administration at Dynatrace.
“Conventional approaches can’t precisely floor vulnerabilities at runtime or analyse their potential exploitability and influence. Dynatrace is the one resolution that gives runtime vulnerability evaluation throughout all the software stack and AI-assisted prioritisation for the most well-liked cloud-native software applied sciences, now together with Golang. With these capabilities, DevSecOps groups can concentrate on remediating probably the most impactful vulnerabilities. This helps them innovate sooner, with the boldness that each one layers of their purposes are vulnerability-free.”