Paymetric Inc., a leading provider of innovative payment card solutions, included Cenzic ClickToSecure Managed, to its software development lifecycle (SDLC). With this addition, Paymetric added security enhancements to an already robust, comprehensive solution for its security initiatives, allowing the company to frequently test and assess various forms of vulnerability and hacking threats.
Paymetric's integrated payment acceptance solutions enable companies to accept, manage and protect payment card transactions across a variety of enterprise applications, including SAP solutions. As the solution provider for integrating payment card transactions in enterprise systems for Fortune 500 organizations, the company understands the importance of hosting a secure, reliable and efficient environment while protecting customer information. The company's previous methods involved a security assessment system that performed a general penetration testing into its environment. To ensure that its customers were receiving the best security practices available, Paymetric was looking to add an inclusive, multifaceted application security solution, for an additional level of security protection.
"The product had the ability to generate frequent tests, and the overall model and product structure worked efficiently within our organization. The Cenzic solution adds a value proposition to our security framework, ensuring that our application meets new security standards and further prevents the potential code exploits that are at risk of being compromised," said Genady Vishnevetsky, director of IT operations and security at Paymetric.
Additionally, Paymetric needed to become compliant with new PCI Requirement 6.6 that necessitates organizations to implement application code review to ensure web applications exposed to the public Internet are protected against the most common types of malicious input as of June 2008. By choosing Cenzic ClickToSecure Managed as an automated assessment solution, Paymetric's web applications will remain secure, as well as validate the organization for PCI compliance.