KaVaDo Upgrades InterDo Software

InterDo complements firewalls by providing protection at the application layer, said Yuval Ben-Itzhak, KaVaDo's CTO and co-founder. The software intercepts traffic to and from applications and shields them from behavior that doesn't follow an application's intended purpose. The product also prevents a range of Web application attacks, including database sabotage and buffer overflows.

The latest version, InterDo 2.5, protects against hacking techniques that exploit HTTP methods, Web services and SOAP, Ben-Itzhak said. Other new features include a user-friendly GUI, a wizard-driven management console and support for KaVaDo's AutoPolicy technology, which enables KaVaDo's ScanDo vulnerability scanner to automatically create or update InterDo's security policy, he said.

InterDo 2.5 comes in business and enterprise editions and is available as both a rack-mount appliance and a software CD. The business edition is tailored for SMBs, while the enterprise version is geared toward large businesses, Ben-Itzhak said. Pricing starts at $9,000 and $15,000, respectively.

New York-based KaVaDo is among a handful of companies in the emerging application security space, which is also served by Sanctum, Santa Clara, Calif., and Stratum8, Sunnyvale, Calif.

Andy Segal, CEO of integrator Vandis, Albertson, N.Y., said a growing number of customers are realizing the need for Web application security. A KaVaDo partner, Vandis serves midsize companies in the banking, insurance and media sectors, which typically have high-profile Web sites or sites containing a lot of sensitive data, he said.

"They're starting to realize that even with the best firewall, the applications themselves can be hacked," Segal said.

Segal also said he welcomes the improved user interface and functionality in InterDo 2.5.