CIGNA Selects Fortify SCA to Enhance Secure Development

SAN MATEO, Calif., May 7 /PRNewswire-FirstCall/ -- Fortify Software Inc., the market leader in enterprise application security solutions, today announced that CIGNA, a leading health service and benefits company, is deploying Fortify(R) Static Code Analysis (SCA) as part of its information protection regimen during application development.

"CIGNA serves millions of people worldwide," said Craig Shumard, CIGNA's Chief Information Security Officer (CISO). "With such a large member base, the security of our information infrastructure is a primary concern for maintaining the integrity of our operations and keeping customer data safe from exploitation."

CIGNA's previous experience with code review had been a resource-intensive, manual process. With hundreds of application developers servicing multiple business units throughout the enterprise, CIGNA needed a code review tool to that could accommodate varied programming languages and development teams, as well as complement their existing network testing processes while having minimal impact on development deadlines.

"With Fortify SCA, we are able to put the tool in the developers' hands to identify vulnerabilities early in the software development lifecycle, thereby eliminating project delays and last-minute fixes that historically arise in the steps just prior to deployment," said Shumard. "Since developers are the experts, it makes sense for them to use this tool and learn the secure development techniques it provides."

While CIGNA is still in the early stage in its deployment of Fortify SCA, the company is already seeing the benefits as it begins trending the number of issues identified over time.

"Fortify SCA has allowed CIGNA to create a new process for developing code that meets its business objectives while still addressing vulnerabilities at the earliest point in development," said Barmak Meftah, Fortify's Senior Vice President of Products and Services. "Fortify SCA's ease of deployment and ability to meet both developer and security team requirements is really resonating with our customers across all industries."

"We strongly believe that Fortify's holistic approach to application security -- implementing security during all stages of development, rather than after the fact -- proactively helps eliminate business risk and truly safeguards our enterprise against today's ever-changing security threats," added Shumard.

About CIGNA

CIGNA Corporation and its subsidiaries constitutes one of the largest investor owned health and related benefits organizations in the United States. CIGNA (NYSE: CI) provides employers with benefits, expertise and services that improve the health, well-being and productivity of their employees. Serving approximately 47 million people in the United States and around the world, CIGNA's operating subsidiaries offer a full portfolio of medical, dental,

behavioral health, pharmacy and vision care benefits and group life, accident and disability insurance. Web site: http://www.cigna.com/.

About Fortify Software, Inc.

Fortify(R)'s Business Software Assurance products and services protect companies from the threats posed by security flaws in business-critical software applications. Its software security suite -- Fortify 360 -- drives down costs and security risks by automating key processes of developing and deploying secure applications. Fortify Software's customers include government agencies and FORTUNE 500 companies in a wide variety of industries, such as financial services, healthcare, e-commerce, telecommunications, publishing, insurance, systems integration and information management. The company is backed by world-class teams of software security experts and partners. More information is available at http://www.fortify.com.

SOURCE Fortify Software Inc.

CONTACT: Katherine Nellums of Merritt Group, Inc., +1-415-247-1663, Nellums@merrittgrp.com, for Fortify Software Inc.