TrustInSoft commercializes a source code analyzer called TrustInSoft Analyzer, which analyzes C and C++ code and mathematically guarantees the absence of defects, immunity of software components to the most common security flaws, and compliance with a specification. The technology is recognized by U.S. federal agency the National Institute of Standards and Technology (NIST), and was the first in the world to meet NIST’s SATE V Ockham Criteria for high quality software.
The key differentiator for TrustInSoft Analyzer is its use of mathematical approaches called formal methods, which allow for an exhaustive analysis to find all the vulnerabilities or runtime errors and only raises true alarms.
Companies who use TrustInSoft Analyzer reduce their verification costs by 4, efforts in bug detection by 40, and obtain an irrefutable proof that their software is safe and secure.
The experts at TrustInSoft can also assist clients in training, support and additional services.
Learn more
Streamline your development process while saving time, reducing costs, and alleviating developer stress with a mobile CI/CD solution that is not only swift and adaptable but also scalable. Whether your preference leans towards native development or cross-platform frameworks, we have a comprehensive solution that meets your needs. Supporting languages such as Swift, Objective-C, Java, and Kotlin, along with platforms like Xamarin, Cordova, Ionic, React Native, and Flutter, we ensure that your initial workflows are configured automatically so you can start building within minutes. Bitrise seamlessly integrates with any Git service, whether public, private, or ad hoc, including platforms like GitHub, GitHub Enterprise, GitLab, GitLab Enterprise, and Bitbucket, available both in the cloud and on-premises. You can easily trigger builds based on pull requests, schedule them for specific times, or set up custom webhooks to suit your workflow. Additionally, our workflows are designed to operate on your terms, enabling you to coordinate various tasks such as performing integration tests, deploying to device farms, and distributing apps to testers or app stores, ultimately enhancing your overall efficiency. With a flexible approach, you can adapt your CI/CD processes to meet the evolving demands of your development cycle.
Learn more
LibFuzzer
LibFuzzer serves as an in-process, coverage-guided engine for evolutionary fuzzing. By being linked directly with the library under examination, it injects fuzzed inputs through a designated entry point, or target function, allowing it to monitor the code paths that are executed while creating variations of the input data to enhance code coverage. The coverage data is obtained through LLVM’s SanitizerCoverage instrumentation, ensuring that users have detailed insights into the testing process. Notably, LibFuzzer continues to receive support, with critical bugs addressed as they arise. To begin utilizing LibFuzzer with a library, one must first create a fuzz target—this function receives a byte array and interacts with the API being tested in a meaningful way. Importantly, this fuzz target operates independently of LibFuzzer, which facilitates its use alongside other fuzzing tools such as AFL or Radamsa, thereby providing versatility in testing strategies. Furthermore, the ability to leverage multiple fuzzing engines can lead to more robust testing outcomes and clearer insights into the library's vulnerabilities.
Learn more
Awesome Fuzzing
Awesome Fuzzing serves as a comprehensive compilation of resources for those interested in the field of fuzzing, encompassing an array of materials such as books, both free and paid courses, videos, tools, tutorials, and vulnerable applications ideal for hands-on practice to enhance one's understanding of fuzzing and the early stages of exploit development, including root cause analysis. It features instructional videos focused on fuzzing methodologies, essential tools, and recommended practices, alongside conference presentations, tutorials, and blogs dedicated to the subject. Additionally, it includes software tools that facilitate fuzzing of applications, particularly those utilizing network protocols like HTTP, SSH, and SMTP. Users are encouraged to search for and select exploits linked to downloadable applications, where they can then recreate the exploits with their preferred fuzzer. The resource also encompasses a range of tests tailored for fuzzing engines, highlighting various well-known vulnerabilities and providing a corpus of diverse file formats to enable fuzzing across multiple targets found in the existing fuzzing literature. Ultimately, this collection aims to empower learners with the necessary knowledge and skills to effectively engage with fuzzing techniques and develop their expertise in security testing.
Learn more
