How does Ounce fit into an overall application security strategy?
An application security strategy can be thought of as something of a continuum, applying traditional security techniques first while getting closer and closer to the code over time. A great – and fast – way to protect your most critical applications is to surround them with a web application firewall (WAF). This gives you some initial protection while determining which applications need to be focused on first. Penetration testing and source code analysis help you to further refine the levels of insight you have into your applications, allowing you to effectively prioritize and address your greatest risks.
