МТС RED ASOC (Application Security Orchestration and Correlation)

MTS RED ASOC is a secure development management platform.

2023: MTS RED ASOC Platform Announcement

MTS RED, a member of MTS, launched the ASOC (Application Security Orchestra and Correlation) class secure development process management platform on November 23, 2023. The solution centrally manages built-in and third-party software security analysis tools, providing multivendor, correlates the data obtained from them, increasing the efficiency of vulnerability processing.

The growing number of software vulnerabilities is a key driver for the development of the secure development market. According to forecasts of the MTS RED analytical center, by the end of 2023 the volume of this segment of the Russian market will reach 4.2 billion rubles, and by 2027 it will amount to almost 20 billion rubles. At the same time, the total average annual growth rate of the secure development market is 44%, which is twice the same indicator of the domestic information security market as a whole (24.6%).

The MTS RED ASOC platform manages various software security analysis tools - static, composite and others. Management is centralized regardless of whether analyzers are built into or integrated with the platform as third-party solutions. This allows companies to use any means of analyzing the security of software, combining solutions from different manufacturers. The analysis results from all sources are collected into convenient reports in a single platform interface, which increases the effectiveness of assessing the real level of application security, MTS RED representatives said.

"MTS RED ASOC is already actively used in the MTS ecosystem. More than 7 thousand developers of MTS subsidiaries use this solution to improve the security of their developments. Over 400 software products of the company are analyzed for code and environment vulnerabilities, and the list of products is constantly expanding. Our platform will help companies to significantly increase the level of security of their applications, to use 100% not only code analysis tools built into MTS RED ASOC, but also those already available in the company at the time of purchasing the solution, "said Sergey Deev, Senior ASOC Product Manager at MTS RED.

By default, the platform integrates with the most common components of the company's assembly infrastructure, and with a software interface and command line interface with an unlimited set of components. 15 programming languages ​ ​ are supported for the built-in static code analyzer and 5 languages ​ ​ for the built-in SCA and OSA analyzers.

MTS RED ASOC is intended for any organization that develops its own software or web applications. The solution improves the security of your company's applications and helps you meet regulatory requirements for software security analysis and implementation of secure development practices.