Announcing CAT.NET CTP & Anti-XSS v3 BETA

Continuing our work to share the tools and techniques we use internally to maintain a secure application portfolio, we today announced the release of CAT.NET CTP and the next version of Anti-XSS.

Irfan (Director of ACE) posted a nice entry on the ACE Team blog going over some of the history of these tools and how they came about...

Happy Holidays!!

-Talhah

Comments

• Anonymous
  March 07, 2009
  It's good to see that Microsoft ACE was able to bring a more holistic approach to their review process by bringing together the risk, infrastructure, and application security teams. We've been successful over the past 2.5 years with this arrangement. Where does the Policy, Standards, and Best Practices (PnP) team reside? How about Enterprise Architecture team? Approvals/Exceptions to deviations? These have been other important groups to partner with or be part of as well for a more complete SDL program. Good luck! Phil Agcaoili