Solar appScreener ensures the safety of Nitrogen

2023: Solar appScreener Rollout

Kemerovo Azot has implemented a comprehensive solution of Solar Group of Companies (a subsidiary of Rostelecom operating in the field of information security) for software security control - Solar appScreen. Using the scanner, the enterprise checks the source code of system and application software, as well as server and web applications. Rostelecom announced this on October 27, 2023.

Large enterprises of the chemical industry are important strategic objects of the Russian Federation, which must function smoothly. To ensure the efficient and safe operation of the flagship of production facilities, Kemerovo Azot is extremely important to automate the process of detecting and eliminating vulnerabilities as much as possible.

The information security system of such objects shall provide complex protection of infrastructure and confidential data against accidental or intentional intrusion of intruders in order to steal or make configuration changes through the installed software. Solar appScreener is an effective tool for solving these problems, which has already made it possible to quickly identify and eliminate code errors and vulnerabilities. By combining the advantages of static (SAST), dynamic code analysis (DAST) and software composition analysis (SCA) into a single interface, full application security control is provided without introducing disparate third-party code analysis tools.

The challenges in Application Security are growing multiply and in these conditions an integrated approach to checking applications for vulnerabilities and undeclared capabilities is very important. Our strategy combines various methods of code analysis within a single interface and correlates the results with each other, which allows us to provide users with an effective and convenient product, "said Vladimir Vysotsky, Head of the Solar appScreen Business Development Group.

Among the advantages of Solar appScreen in KAO "Azot" noted an informative and capacious report, divided into threat levels, as well as a recommendation system with options for eliminating the identified vulnerabilities.