ASPM by Fluid Attacks is a recent approach to application security, previously known as application security orchestration and correlation (ASOC). It centralizes risk or vulnerability reports from multiple application security testing (AST) tools. ASPM aims to improve risk contextualization, prioritization, and management in companies to enhance cybersecurity. Fluid Attacks' ASPM operates on a single platform that manages automated tools and ethical hackers, consolidating assessment results throughout clients' software development lifecycles. ASPM works at the application level, with findings from CSPM tests also integrated into the platform. It offers continuous security testing and reporting throughout the SDLC, helping to prevent bottlenecks, reduce remediation costs, and avoid security incidents. The platform integrates all tools, analyzing and correlating results, saving time by eliminating the need to collect data from different sources and prioritize risks. Detailed reports and remediation support cover a wide range of vulnerabilities. The platform provides precise details on identified vulnerabilities, allowing the assignment of team members responsible for remediation and offering support channels for risk mitigation. Vulnerability remediation is based on adequate prioritization of risks, highlighting the most relevant security issues that could imply danger to the company. ASPM relies on scores such as CVSS and other metrics, considering probabilities of exploitation and critical assets that could be affected in cyberattacks. It allows management of compliance with international cybersecurity standards and guidelines such as PCI DSS, HIPAA, GDPR, SOC 2, ISO/IEC 27001-2, and OWASP. Specific policies or requirements can be defined and monitored to ensure compliance by development and security teams.
