Cigital

Cigital was a software security managed services firm based in Dulles, VA.^[3] The services they offered included application security testing, penetration testing, and architecture analysis. Cigital also provided instructor-led security training and products such as SecureAssist, a static analysis tool that acts as an application security spellchecker for developers.^{[4][5][6][7][8]}

Cigital

Company type	Public
Industry	software security
Founded	1992, as Reliable Software Technologies, renamed in 2000 to Cigital[1]
Fate	acquired by Synopsys
Headquarters	Mountain View, CA, Dulles, VA , U. S.
Number of locations	Atlanta, Bangalore, Bloomington, Boston, Chicago, Dallas, Minneapolis, New York, Santa Clara, Seattle, London
Area served	Worldwide
Key people	Gary McGraw
Services	Architecture Analysis, Ethical Hacking, Penetration Testing, Static Analysis, Training, Policy Development
Owner	Public Company
Number of employees	400 security consultants[2]
Parent	Synopsys
Website	https://www.synopsys.com/software-integrity.html

History

Cigital was established in 1992 with grants from DARPA.^[9][10] In 1999 the firm created ITS4, which according to Cigital, was the world's first static analysis tool.^[11] The technology in this product was eventually licensed to Kleiner Perkins and used as the basis for the creation of Fortify Software in 2003. In 2010, Fortify was acquired by Hewlett Packard for $300 million.^[12]

BSIMM (Build Security In Maturity Model)^[13] is a software security measurement framework that helps organizations compare their software security to other organizations.^[14] BSIMM was started as a joint project by Cigital and Fortify Software.^[15][16]

In 2002, Cigital announced finding a vulnerability in Visual C++ .Net compiler^[17][18][19] (related to a GS compiler flag being inefficient).^[20] Cigital was criticized for not following responsible disclosure in this case,^[20] however, Cigital has defended its position due to the nature of the vulnerability.^[20]

On November 30, 2016, Cigital was acquired by Synopsys, an electronic design automation company.^[21]

Acquisitions

In November 2014, Cigital acquired IViz Security, an information security company in the field of on-demand application penetration testing.

In November 2016, it was announced that Synopsys, Inc. would be acquiring Cigital and Codiscope.^[22]