Forrester

Why Read This Report

As application-level exploits continue to generate headline news, security professionals increasingly look to application security measures to protect their organizations. To succeed, security professionals must understand the maturity of the various technologies and track quickly emerging technology trends to optimize investment initiatives and focus deployment efforts. To help security managers with this endeavor, we carefully examined eight application security technologies and services. We found that most organizations already employ penetration testing, and a good number also consider application consulting services valuable. Propelled by compliance requirements, adoption for application scanning and Web application firewall (WAF) are growing. Use of source code analysis is still rare, and some of the niche technologies, such as software protection, are developing comfortably into standalone markets. Adoption for protocol testing technologies remains limited. And finally, application security software-as-a-service (SaaS) is a brand-new market but shows tremendous potential.