Viaforensics, LLC SBIR Phase II Award, December 2020

viaForensics will enhance the automated security testing of NIAP-based criteria, and streamline NIAP evaluation workflow, providing developers, security teams and evaluators the necessary context to assess and achieve compliance. The NIAP evaluator reporting workflow accelerates the evaluation process with security findings in-context, coupled with evaluator guidance, and entry points for assertions, list assignments, notes and Pass/Fail rating. In this Sequential Phase II proposal, NowSecure intends to add enhancements to the platform which include automated API testing and IAST SDK mobile app security testing.  The combination of automated NIAP security tests with API and IAST SDK testing will enable development teams to address security issues during the development process and significantly reduce the time and effort involved for security teams to vet the mobile apps. Authorizing officials will have the confidence to approve and push updated mobile apps to deployed devices quickly, supporting the warfighter through mobility.