Parasoft WebKing 5 Adds Security Testing Module to Automated Functional and Load Testing Capabilities; New Release Delivers a Single, Integrated Tool Suite for Comprehensive Testing of Web Applications Without Need for Scripting

Business Wire, August 30, 2005

MONROVIA, Calif. -- Parasoft Corporation, leading provider of automated error prevention solutions, announced today the release of WebKing 5 which extends its automated web application testing capabilities with the addition of a security testing module and extensions to its automated test case generation capabilities. Parasoft WebKing is used worldwide to automate critical web verification practices including static analysis, functional testing, regression testing and load testing.

Parasoft WebKing 5 with its security testing module can now automatically perform "hacker like" attack scenarios that will determine an application's vulnerability to many common and devastating types of Web security attacks including SQL and parameter injections, cross-site scripting, broken authentication and session management, buffer overflows, broken access control, improper error handling, and denial of service. By analyzing the access to the web application through the web interface, the WebKing 5 security module will determine what kind of attacks are most likely to be performed and generate test cases to simulate them. Since WebKing interacts through the interface of the running web application, it can test the security of any web-enabled application regardless of the server-side implementation.

In addition to the new security module, WebKing 5 provides key enhancements to its automated functional and load testing capabilities making it even easier to undertake the testing of complex web applications and generate comprehensive test scenarios without the need to script. Among these new capabilities are:

--The improved recording of critical paths for test case generation that will now use dynamically changing data and allow full customization and extension of test cases.

--The automated configuration of functional tests that will only test important page differences.

--The extension of load testing capabilities to provide flexible external data source feeds, allow customization of test scenarios dynamically during testing, and capture and report extended system performance and network information from Windows and SNMP monitors.

"Ensuring the reliability, security and performance of web applications remains a critical issue for organizations, and Parasoft WebKing 5 makes this easier than ever before," said Mark Johnson, Parasoft Senior Vice President of Marketing. "With the addition of an extensive security testing capability, the new version of WebKing provides the most complete and cost effective suite of integrated automated testing capabilities that organizations need to ensure their applications and data are secure and perform to the requirements of their business."

Availability

Parasoft WebKing 5 is available for Windows 2000, Windows XP, Linux and Solaris. Pricing starts at $3,995. The WebKing 5 security testing module is separately licensed.

About Webking

Parasoft WebKing is a comprehensive Web testing product that improves the functionality, security, performance, reliability, accessibility, and presentation of Web applications. To verify functionality, WebKing allows users to record critical user click paths by following them in a browser, then it automatically configures and executes functional/regression tests that verify paths and page contents while ignoring insignificant differences. To verify security, WebKing automates security static analysis and penetration testing to determine whether the application is vulnerable to Web security attacks and to verify that the organization's security policy is implemented and operating properly. For more information visit: www.parasoft.com/webking5.> About Parasoft

Parasoft is the leading provider of innovative solutions for automated software test and analysis and the establishment of software error prevention practices as an integrated part of the software development lifecycle. Parasoft's product suite enables software development and IT organizations to significantly reduce costs and delivery delays, ensure application reliability and security, and improve the quality of the software they develop and deploy through the practice of Automated Error Prevention (AEP). Parasoft has more than 10,000 clients worldwide including: Bank of America, Boeing, Cisco, Disney, Ericsson, IBM, Lehman Brothers, Lockheed, Lexis-Nexis, Sabre Holdings, SBC and Yahoo. Founded in 1987, Parasoft is a privately held company headquartered in Monrovia, CA. For more information visit: www.parasoft.com.