Asakabank has implemented Solar appScreener to improve the security of its applications

2022: Solar appScreener implementation

Uzbek JSC Asakabank has implemented a static code analyzer Solar appScreener to ensure secure development processes. The solution of the company "RTK-Solar" allows the bank to timely identify and eliminate vulnerabilities in software that is developed in a financial institution. This was announced by the company "RTK-Solar" on September 27, 2022.

The project to implement Solar appScreen in Asakabank JSC was implemented jointly with the ITSEE system integrator.

Digital technologies are an integral part of Asakabank JSC. The bank has high requirements for the developed IT tools - they should be not only convenient, but also safe. Therefore, Asakabank JSC pays special attention to the security of software products. The Solar appScreener solution used helps to eliminate vulnerabilities and other code flaws at all stages of creating information systems and mobile applications.

Solar appScreener static code analyzer is used in Asakabank JSC in the development of its own software products. It checks various web systems that are necessary to ensure the operation of a credit and financial organization, interaction with partners and customers, as well as mobile applications. The use of the scanner allows, even at the development stage, to identify vulnerabilities and errors in the program code and increase the security of the software created in the bank.

Financial institutions remain one of the most attractive targets for cybercriminals. The presence of vulnerabilities in information systems and applications allows attackers to penetrate the infrastructure of banks. The sooner the company begins to identify errors and shortcomings in the program code of the application being developed, the easier and cheaper it will be to ensure the security of the corresponding system, emphasized Daniil Chernov, Director of the Solar appScreen Center of RTK-Solar.

Solar appScreener can be used both for individual code checks and as a central element of the secure development cycle (Secure SDLC). The analyzer supports 36 programming languages. One of the features of the solution is an intuitive interface in which errors identified in the code are highlighted and detailed tips are given to fix vulnerabilities. In addition to the database of vulnerability search rules, the relevance of which the vendor constantly supports, it is possible to create its own vulnerability search rules, upload them to the system through the interface and use them when analyzing projects.