|By Business Wire||
|June 11, 2014 07:05 AM EDT||
SourceClear, the company creating a modern software security platform for developers, today announced it has closed $1.5 million in seed funding for the SourceClear platform, which is turning traditional software security inside-out. With general availability in the coming weeks, SourceClear empowers developers with the intelligence to make smarter decisions while they’re building software, ensuring organizations gain complete visibility across their software portfolios. The platform integrates directly into established development tools, is armed with machine-learning capabilities and leverages ‘big data’ analytics.
“Developers are literally the only people who can solve the epidemic in software security,” said SourceClear Founder and CEO Mark Curphey. “Traditional security tools were built for security and IT people, and there has been poor adoption and high degrees of friction from developers. With the cloud, agile, open-source, mobile, devops, big-data, artificial intelligence and social platforms, developers are changing the world faster than ever before and security tools simply haven’t kept up. We are changing that. Developers love us, and our early funding is a strong vote of confidence in our vision.”
Solving Security Problems at Their Source
SourceClear’s first product helps organizations identify which components they are using across their software portfolio, where they come from, what they do and which ones have security issues. They then help developers fix the issues and stay protected against new threats.
Up to 80% of the source code in modern applications originates from reusable and open-source development frameworks and libraries. Hackers have learned to analyze and exploit these components giving them access to far more data than hacking systems one-by-one. Hackers and governments are known to have modified open-source libraries which are then innocently installed by developers creating backdoors and vulnerabilities that can be exploited at will.
“Developers are the ones burdened with security failures,” said Frank Marshall, former VP of Engineering at Cisco Systems Inc. “By operating within developers’ workflows and helping them find and fix issues in real-time, SourceClear is addressing the biggest security vulnerability: The inability of organizations to distribute the right information to the right people at the right time.”
SourceClear Secures A-List of Angel Investors
The SourceClear seed funding round is led by a group of world-class angel investors including Justin Somaini, Chief Trust Officer at Box.com; Frank J. Marshall, former VP of Engineering at Cisco Systems Inc.; Amos Michelson, Chairman of Kardium; and Mary Cirillo, board member at Thomson Reuters (TRI).
Founded by security veterans from Microsoft (MSFT), Charles Schwab (SCHW) and Foundstone / McAfee (MFE), SourceClear’s over-subscribed seed round reflects strong interest in the company’s initial products, traction from early adopters and the upcoming product portfolio. CEO and Founder Mark Curphey also founded OWASP, headed the software security program at Charles Schwab, led the information security tools team at Microsoft and was the Product Unit Manager for the Microsoft Developer Network (MSDN).
Boasting a track record of working with successful security and enterprise companies, angel investors include:
- Justin Somaini, Chief Trust Officer, Box.com; former CSO at Yahoo! (YHOO), Verisign (SYMC) and Symantec (SYMC);
- Frank J. Marshall, former Vice President of Engineering at Cisco Systems (CSCO), director on numerous boards, including Juniper Networks (JNPR), Aerohive Networks (HIVE) and InfoBlox (BLOX) and former Chairman Netscreen Technologies (NSCN). Successful security seed investments include MobileIron and SourceFire;
- Amos Michelson, chairman of Kardium, former CEO of Creo and CEO of Opal Inc.; former Ernst & Young Entrepreneur of the Year;
- Mary Cirillo, Member of the Board at Thomson Reuters, former Cisco board member;
- Seattle-based Kinzer Capital;
- London-based Realise Capital Partners;
- A private investment syndicate based in Tel-Aviv and Silicon Valley.
SourceClear’s world-class advisory board includes Box.com Chief Trust Officer Justin Somaini, privacy expert and author Siobhan MacDermott, CrowdStrike CEO and former McAfee global CTO George Kurtz, software security expert John Viega and user experience expert Charlie Claxton.
At SourceClear, we believe that security must be built-in—by developers themselves, in real time, as they create applications. We’re the only company on the planet 100% dedicated to building security tools for software developers. Tools they love to use. Tools they actually use. Find out more at https://sourceclear.com.
The Software Defined Data Center (SDDC), which enables organizations to seamlessly run in a hybrid cloud model (public + private cloud), is here to stay. IDC estimates that the software-defined networking market will be valued at $3.7 billion by 2016. Security is a key component and benefit of the SDDC, and offers an opportunity to build security 'from the ground up' and weave it into the environment from day one. In his session at 16th Cloud Expo, Reuven Harrison, CTO and Co-Founder of Tufin,...
Jul. 31, 2015 03:00 PM EDT Reads: 490
SYS-CON Events announced today that MobiDev, a software development company, will exhibit at the 17th International Cloud Expo®, which will take place November 3–5, 2015, at the Santa Clara Convention Center in Santa Clara, CA. MobiDev is a software development company with representative offices in Atlanta (US), Sheffield (UK) and Würzburg (Germany); and development centers in Ukraine. Since 2009 it has grown from a small group of passionate engineers and business managers to a full-scale mobi...
Jul. 31, 2015 02:30 PM EDT Reads: 268
There are many considerations when moving applications from on-premise to cloud. It is critical to understand the benefits and also challenges of this migration. A successful migration will result in lower Total Cost of Ownership, yet offer the same or higher level of robustness. In his session at 15th Cloud Expo, Michael Meiner, an Engineering Director at Oracle, Corporation, analyzed a range of cloud offerings (IaaS, PaaS, SaaS) and discussed the benefits/challenges of migrating to each offe...
Jul. 31, 2015 02:30 PM EDT
Chuck Piluso presented a study of cloud adoption trends and the power and flexibility of IBM Power and Pureflex cloud solutions. Prior to Secure Infrastructure and Services, Mr. Piluso founded North American Telecommunication Corporation, a facilities-based Competitive Local Exchange Carrier licensed by the Public Service Commission in 10 states, serving as the company's chairman and president from 1997 to 2000. Between 1990 and 1997, Mr. Piluso served as chairman & founder of International Te...
Jul. 31, 2015 02:00 PM EDT Reads: 362
Mobile, social, Big Data, and cloud have fundamentally changed the way we live. “Anytime, anywhere” access to data and information is no longer a luxury; it’s a requirement, in both our personal and professional lives. For IT organizations, this means pressure has never been greater to deliver meaningful services to the business and customers.
Jul. 31, 2015 01:45 PM EDT
In their session at 17th Cloud Expo, Hal Schwartz, CEO of Secure Infrastructure & Services (SIAS), and Chuck Paolillo, CTO of Secure Infrastructure & Services (SIAS), provide a study of cloud adoption trends and the power and flexibility of IBM Power and Pureflex cloud solutions. In his role as CEO of Secure Infrastructure & Services (SIAS), Hal Schwartz provides leadership and direction for the company.
Jul. 31, 2015 11:45 AM EDT Reads: 125
In a recent research, analyst firm IDC found that the average cost of a critical application failure is $500,000 to $1 million per hour and the average total cost of unplanned application downtime is $1.25 billion to $2.5 billion per year for Fortune 1000 companies. In addition to the findings on the cost of the downtime, the research also highlighted best practices for development, testing, application support, infrastructure, and operations teams.
Jul. 31, 2015 11:45 AM EDT Reads: 117
Puppet Labs has announced the next major update to its flagship product: Puppet Enterprise 2015.2. This release includes new features providing DevOps teams with clarity, simplicity and additional management capabilities, including an all-new user interface, an interactive graph for visualizing infrastructure code, a new unified agent and broader infrastructure support.
Jul. 31, 2015 10:00 AM EDT Reads: 142
For IoT to grow as quickly as analyst firms’ project, a lot is going to fall on developers to quickly bring applications to market. But the lack of a standard development platform threatens to slow growth and make application development more time consuming and costly, much like we’ve seen in the mobile space. In his session at @ThingsExpo, Mike Weiner, Product Manager of the Omega DevCloud with KORE Telematics Inc., discussed the evolving requirements for developers as IoT matures and conducte...
Jul. 31, 2015 08:45 AM EDT Reads: 302
Container technology is sending shock waves through the world of cloud computing. Heralded as the 'next big thing,' containers provide software owners a consistent way to package their software and dependencies while infrastructure operators benefit from a standard way to deploy and run them. Containers present new challenges for tracking usage due to their dynamic nature. They can also be deployed to bare metal, virtual machines and various cloud platforms. How do software owners track the usag...
Jul. 31, 2015 08:00 AM EDT Reads: 159
Explosive growth in connected devices. Enormous amounts of data for collection and analysis. Critical use of data for split-second decision making and actionable information. All three are factors in making the Internet of Things a reality. Yet, any one factor would have an IT organization pondering its infrastructure strategy. How should your organization enhance its IT framework to enable an Internet of Things implementation? In his session at @ThingsExpo, James Kirkland, Red Hat's Chief Arch...
Jul. 30, 2015 07:30 PM EDT Reads: 1,401
Providing the needed data for application development and testing is a huge headache for most organizations. The problems are often the same across companies - speed, quality, cost, and control. Provisioning data can take days or weeks, every time a refresh is required. Using dummy data leads to quality problems. Creating physical copies of large data sets and sending them to distributed teams of developers eats up expensive storage and bandwidth resources. And, all of these copies proliferating...
Jul. 30, 2015 06:30 PM EDT Reads: 892
Malicious agents are moving faster than the speed of business. Even more worrisome, most companies are relying on legacy approaches to security that are no longer capable of meeting current threats. In the modern cloud, threat diversity is rapidly expanding, necessitating more sophisticated security protocols than those used in the past or in desktop environments. Yet companies are falling for cloud security myths that were truths at one time but have evolved out of existence.
Jul. 30, 2015 06:00 PM EDT Reads: 1,804
Digital Transformation is the ultimate goal of cloud computing and related initiatives. The phrase is certainly not a precise one, and as subject to hand-waving and distortion as any high-falutin' terminology in the world of information technology. Yet it is an excellent choice of words to describe what enterprise IT—and by extension, organizations in general—should be working to achieve. Digital Transformation means: handling all the data types being found and created in the organizat...
Jul. 30, 2015 05:00 PM EDT Reads: 1,090
Public Cloud IaaS started its life in the developer and startup communities and has grown rapidly to a $20B+ industry, but it still pales in comparison to how much is spent worldwide on IT: $3.6 trillion. In fact, there are 8.6 million data centers worldwide, the reality is many small and medium sized business have server closets and colocation footprints filled with servers and storage gear. While on-premise environment virtualization may have peaked at 75%, the Public Cloud has lagged in adop...
Jul. 30, 2015 04:00 PM EDT Reads: 2,206