Customer Login \| Contact \| Blog
1-866-4-CENZIC (866-423-6942) \|

White Papers

Thought leadership in web app security

As a thought leader in the Web application security space, Cenzic offers you a plethora of white papers – from industry analysts, independent product reviews, and our own internal experts – to learn more about this emerging market.

Just click the links to any / all of the PDF documents below. The newer content is hidden behind a web registration form, so please fill it out – you won’t be sorry. Happy reading!

Analyst White Papers

Ponemon Report on the Cost of a Data Breach (March 2011)
http://www.cenzic.com/downloads/Ponemon_DataBreach_201103.pdf
Ponemon Report (March 2011) on the State of Web App Security
Fill out the web registration form here.
Aberdeen Report on Web Application Scanners (Sep 2010)
Fill out the web registration form here.
Ponemon Report on the Cost of a Data Breach (Jan 2010)
http://www.cenzic.com/downloads/Ponemon_DataBreach_201001.pdf
IDC White Paper on Application Security: No Room for False Positives
http://www.cenzic.com/pdfs/IDC_False_Positives_2.pdf

Cenzic eBooks

E-book: Web App Security for SMBs (Feb 2011)
Fill out the web registration form here.
E-book: Web App security Maturity: A CSO’s Strategy Guide (July 2010)
Fill out the web registration form here.

Cenzic Technology White Papers

Cenzic Hybrid Solution: Software + Managed Services
http://www.cenzic.com/downloads/HybridSolutionWP.pdf
GovShield: Helping Defend the Government Web Infrastructure
http://www.cenzic.com/downloads/GovShield_WP.pdf
California Identity Theft Laws & Application Security: AB 1950, SB 1386, & Beyond
http://www.cenzic.com/downloads/ab1950.pdf
Continuous Testing: Testing Production Applications
http://www.cenzic.com/pdfs/Cont_Assess_WP.pdf
Leveraging Managed Service Technology for Web Application Security
http://www.cenzic.com/pdfs/ManagedService_WP.pdf
Stateful Assessment: A higher quality method for identifying and verifying Web application vulnerabilities
http://www.cenzic.com/pdfs/StatefulAssessment_WP.pdf
Web Application Security: The Truth Behind White Box VS Black Box Testing
http://www.cenzic.com/pdfs/Whitebox_VS_Blackbox_WP.pdf

Testing for Cross-Frame Scripting Attacks
http://www.cenzic.com/pdfs/Cross-FrameScripting_WP.pdf
Enabling Security in the Software Development Life Cycle (SDLC)
http://www.cenzic.com/downloads/EnablingSecurity-SDLC.pdf

Decade In Review: Analysis for Web App Security in the Next 10 Years
http://www.cenzic.com/pdfs/Decade-in-Review_WP.pdf

Cenzic Executive Briefs

Good Enough Security – Easy Steps to Get You Started
http://www.cenzic.com/downloads/ExecutiveBrief_GoodEnoughSecurity201110.pdf

Top 10 Best Practices in Web Application Security
http://www.cenzic.com/downloads/ExecutiveBrief_Top10BestPracticies201109.pdf

Partial Testing of Web Applications Is Like Doing Partial Heart Surgery
http://www.cenzic.com/downloads/ExecutiveBrief_PartialTesting201109.pdf

Web Application Security – Compliance Regulations Lagging?
http://www.cenzic.com/downloads/ExecutiveBrief_ComplianceRegs201109.pdf

Independent Product Reviews

EMA Application Security Radar Report (Oct 2009)
http://www.cenzic.com/downloads/EMA_AppSecurityRadarReport_200912.pdf

EMA Application Security Radar Report (Cenzic highlighted) (Oct 2009)
http://www.cenzic.com/downloads/EMA_AppSecurityRadarReport_200912.pdf

The 451 Group Report on the Web application security market featuring Cenzic Hailstorm Enterprise ARC 5.7 (Feb 2009)
http://www.cenzic.com/downloads/451_impact_report_20090203.pdf

Information Security Magazine product review of Web application security scanner, Cenzic Hailstorm Enterprise ARC 5.7 (Jan 2009)
http://www.cenzic.com/downloads/infosec-200901-arc5.7.pdf

EMA White Paper on Virtualization (Dec 2007)
http://www.cenzic.com/downloads/EMA_Cenzic-Hailstorm.pdf