Ounce Labs updates software risk-analysis tool

Ounce Labs on Monday announced a new version of its software risk-analysis tool designed to help enterprises spot potential security weaknesses in applications.

Slated for release in early July, Ounce 5.0 includes checks for compliance with the Payment Card Industry (PCI) standard, the Open Web Application Security Project (OWASP) Top 10 2007 and the Common Weakness Enumeration specification, according to company officials. This means Ounce 5.0 customers will be able to make sure the applications they build adhere to the rules of these specifications, according to company officials.

The upgrade was announced at the Gartner IT Security Summit, held this week in Washington, D.C.

Version 5.0 includes improvement to the tool’s analysis capabilities, such as more granular vulnerability analysis, pattern-based semantic analysis and better triage of vulnerabilities, officials say. By improving the analysis capabilities of the tool, Ounce lets customers focus more on the high-impact vulnerabilities in software and less on the mundane issues, officials say.

Pricing for Ounce 5.0 has not been announced.