The idea of shifting security left in the software development process, integrating it earlier on, is a crucial aspect of application security. However, achieving this can pose a challenge for developers who must take on security responsibilities without the necessary tools tailored to their workflows.

Addressing this issue is the newly launched Symbiotic Security, a software-as-a-service platform designed to seamlessly integrate vulnerability detection and remediation capabilities directly into the application developer’s integrated development environment (IDE). Additionally, the platform offers just-in-time training to developers, equipping them with the knowledge and skills needed to write secure code.

Jerome Robert, the co-founder and CEO of Symbiotic Security, likened using the platform to having a personal security coach by your side while coding. It provides real-time feedback on security mistakes and offers training to prevent their recurrence, making it a valuable tool for developers striving to write secure code efficiently.

One of the key features of Symbiotic Security is its plug-in that continuously scans code in the developer’s IDE, identifying potential security threats as the code is being typed and offering contextual remediation advice right within the IDE interface. This proactive approach to security nudges developers in real-time, helping them save time by addressing issues as they arise rather than having to backtrack to fix older code.

In addition to real-time feedback, developers can access training materials in the form of capture-the-flag (CTF) content, which educates them on security vulnerabilities and provides examples of secure versus vulnerable code. Engaging in a game-like scenario, developers are challenged to identify and fix insecure code snippets, ultimately enhancing their secure coding skills.

What sets Symbiotic Security apart from other code security tools, according to Robert, is the timing of issue identification. While many tools flag mistakes after the code has been written, often during code commits or integration with the build, Symbiotic Security’s plug-in detects and addresses issues as they occur, fostering a proactive and continuous approach to security.

As part of its recent launch, Symbiotic Security secured $3 million in seed funding from investors such as Lerer Hippeau, Axeleo Capital, and Factorial Capital. The platform has already been deployed at eight companies, highlighting the demand for integrated security solutions that empower developers to prioritize and implement security measures throughout the development process.

Overall, Symbiotic Security’s innovative approach to integrating security into the software development life cycle signifies a positive shift towards building more secure and robust applications from the ground up. By providing developers with the tools, training, and support they need to write secure code efficiently, Symbiotic Security is poised to make a significant impact in enhancing application security practices across industries.

Source link