SDL Training, Consulting and Products

Security Innovation's software security solutions are expansive and can help organizations in a variety of ways.  The majority of Microsoft SDL Pro Network providers offer either training or consulting services; however, Security Innovation can offer both. Further, Security Innovation provides state-of-the art tools that were designed specifically with the SDL in mind.

Consulting

Our consulting services can guide you through the entire cycle of development, help you determine where the gaps in your current process can introduce vulnerabilities, and identify areas of risk in your existing procedures, as well as suggest ways to mitigate those risks. Additionally, because we are also an application development organization, we have implemented the SDL internally and we are aware of the intricacies inherent in such an undertaking. 
 

Training

Security Innovation's training program is sought out by companies all over the world that want to secure their software development, shore up their processes and provide training and tools to help their teams continue to be successful.   We offer both instructor-led and e-learning modules:

	Our instructor-led courses are customizable to suit the needs of the audience, are conducted in an intimate setting with an expert trainer, and are aimed at all the practitioners on your team: architects, developers, testers and IT groups.
	Computer-based training modules are suitable to be rolled out to large development or testing groups, and are ideally suited to be a turn-key training solution.

Products

Providing teams with the tools that will make them successful in following the SDL is another key component - one where Security Innovation excels. From fuzz testing to attack surface identification to static analysis, Security Innovation has the tools that will enable your groups to produce secure software. Security Innovation provides state-of-the art tools that were designed specifically with the SDL in mind.

The tool suite includes

• Holodeck - a revolutionary fuzz testing and dynamic analysis tool 
• TeamMentor - an extensible guidance system for secure coding best practices 
• CxDeveloper - next generation security source code static analysis