託管式應用程式安全是 OpenText™ 應用程式安全平台的雲端單一租戶部署。OpenText 在您所選擇的 AWS 區域中提供並運作環境，提供 SAST、DAST，以及選購的 SCA，並將其緊密整合至您的軟體開發生命週期中。OpenText 負責處理基礎架構、升級和備份，讓您的團隊能專注於 AppSec，而非伺服器。

為何選擇託管的應用程式安全

在由 OpenText 透過 AWS 或 OpenText Private Cloud 託管的單一租戶雲端環境中部署企業級 AppSec。

啟用為您託管的私人 AppSec

在您選擇的 AWS 區域中獲得專屬的 AppSec 環境，並由 OpenText 完全託管和營運。您可維持控制和隔離，同時卸下所有基礎架構和升級負擔。
整合至您的 DevSecOps 管線

專為 DevSecOps 打造的託管 AppSec 環境，透過外掛程式、執行程式和完整 API 連接您的 IDE、CI/CD 管線和建置系統。在每次提交或發布時執行 SAST、DAST 和可選的 SCA，並於軟體安全中心管理結果和政策。
實現全面覆蓋與更快速的修復

獲得更廣泛的涵蓋範圍、更聰明的發現，以及更快速的修復。機器學習驅動的稽核可消除噪音、突出重點，並在開發人員的工作流程中提供即時且可操作的指導。
集中風險的可視性與治理

一切清晰明瞭、單一的儀表板，全面掌控。從單一、統一的指揮中心追蹤風險、執行政策，並管理每個團隊和應用程式的 AppSec。

商業影響

AppSec 現代化

啟動或現代化 AppSec 計畫可能會讓團隊在硬體、設置和維護方面陷入困境。透過完全託管、單一租戶的環境，讓他們專注於保護應用程式，而非執行伺服器。
治理與合規性

共享 SaaS 模式無法滿足嚴格的合規性需求。透過專屬且隔離的雲端環境，滿足法規、駐留及內部安全需求。
測試能力

隨著程式持續成長，您需要支援更多的應用程式、更高的掃描量，以及更快的發布週期。利用彈性的 SAST 和 DAST 運算選項，按需增加容量並提升掃描能力。
適用於全球團隊的統一 AppSec

當團隊分散於全球各地時，您如何確保整個企業的安全性保持一致？透過集中式政策、儀表板和工作流程，為每個開發團隊提供單一且一致的方式來測試、分類和報告風險。

取得託管應用程式安全概述

探索解決方案的各個組成部分

產品

利用 OpenText 解決商業挑戰。

OpenText™ Core Application Security
解鎖安全測試、漏洞管理，以及量身打造的專業知識與支援
OpenText™ Static Application Security Testing (SAST)
及早發現並修正安全問題，以業界領先的準確度
OpenText™ Dynamic Application Security Testing (DAST)
持續測試實時應用程式，以發現真實世界的漏洞
OpenText™ Core Open Source Select
在同一個資料庫中尋找並評估超過 4,000 萬個開放原始碼專案
OpenText™ Application Security Aviator
利用 AI 程式碼分析和程式碼修復建議，更聰明地保障安全，而非更費力地維護
OpenText™ Core Software Composition Analysis
全面掌控開放原始碼安全、合規性和健康狀況
OpenText™ 和 Secure Code Warrior
透過風險管理和修復訓練加速安全編碼

專業服務

OpenText諮詢服務結合端到端解決方案的實施與全面的技術服務，以協助改善系統。

Resources

It’s a cloud-based, single-tenant application security environment provisioned and operated by OpenText. The service includes the core components required to run static, dynamic, and optional software composition analysis within your SDLC, without your team having to manage infrastructure, upgrades, or backups.
Both options deliver a dedicated, single-tenant application security environment operated by OpenText. The AWS-hosted version runs in a commercial AWS region you select, while the OpenText Private Cloud version is delivered within an OpenText-operated private cloud environment. Both provide similar isolation, management, and support models to meet varying security and residency requirements.
The environment supports static application security testing (SAST), dynamic application security testing (DAST), and optional Software Composition Analysis (SCA). These assessments can be triggered through the web interface, CI/CD pipelines, APIs, developer tools, and automated workflows.
Users interact through Software Security Center, a web-based management interface used to configure applications, view results, and manage policies. Developer and DevSecOps teams can also use IDE plugins, CI/CD extensions, build tool integrations, and API-driven automation to run assessments and pull results directly into their workflows.
OpenText is responsible for provisioning, operating, monitoring, backing up, and upgrading the hosted environment. Maintenance windows, update schedules, and availability targets are defined in the service description, and the environment is operated according to documented service levels.
Access is established through secure internet connectivity restricted to approved IP ranges or through a site-to-site VPN, depending on your organization’s networking requirements. All traffic to the hosted environment follows approved connectivity patterns defined during onboarding.
Yes. You can adjust the mix and quantity of SAST and DAST scan machines to meet changing demand. Capacity can be increased to support additional applications, larger codebases, or more frequent scan cycles.
Yes. Software Security Center provides a unified view of application risk across all projects. It centralizes policies, roles, metrics, dashboards, and reporting to support audits, compliance, and enterprise-wide AppSec governance.

Hosted application security overview

Read the product overview

OpenText Portfolio delivery models data sheet

Read the data sheet

Gartner® Magic Quadrant™ for Application Security Testing

Read the report