Fortify Software to acquire Secure Software

The acquisition of Secure Software will allow Fortify to expand into the requirements and design phases of the software development lifecycle, the company said.

Fortify Software Inc., whose product is used by Oracle Corp. and others to scour source code for possible security flaws, has announced plans to acquire Secure Software Inc.

The acquisition of Secure Software will bolster Fortify's position in the software security market by expanding its worldwide customer base and extending its presence in the greater Washington, D.C. area to better serve the federal market, the Palo Alto, Calif.-based company said in a press release.

Fortify Software:
Podcast: Fortify Software's Brian Chess (August 2006)

Fortify's code-scanning tool automates software review at financial firm

Tip: Source code security scanners: A revamped option for securing custom software

Furthermore, the company said, "Secure Software's technology, including its rights to Comprehensive, Lightweight Application Security Process (CLASP), expands Fortify's reach into the requirements and design phases of the software development lifecycle. It further strengthens Fortify's integration with IBM products, specifically the Rational Unified Process (RUP)."

Under the terms of the agreement, Fortify will acquire certain intellectual property, capital assets, and skilled resources belonging to Secure Software. Secure Software customers will be provided with the full range of support and professional services that Fortify customers currently enjoy, Fortify said. The price tag for Secure Software was not immediately disclosed.

"We are very proactive in improving the knowledge and skills of our application developers related to information security and removing security-related vulnerabilities early in the application development lifecycle," Jim Routh, CISO of the Depository Trust and Clearing Corp. said in a statement. "Secure Software has been a trusted partner, and we're confident that Fortify Software will continue to deliver the same value proposition of improving our software capabilities, providing our customers with highly resilient products and services."

Read more on IT risk management