Trustwave, a leading provider of information security and compliance management solutions to businesses and organizations throughout the world, announces the acquisition of Creduware, an enterprise application security infrastructure management company. The deal has closed effective immediately and its terms are confidential.
As a result of the acquisition, Creduware’s Credential Management Platform will be integrated into Trustwave’s suite of identity management security solutions as two distinct products:
— Trustwave Certificate Lifecycle Manager (CLM) — Automates digital certificate renewal and installation.
— Trustwave Application Password Manager (APM) — Automates password policy and implements policy-based application monitoring.
Both CLM and APM product features enable organizations to reduce exposure related to shared credentials, hard coded credentials, and credential expiration and compromise.
“Trustwave’s acquisition of Creduware really helps establish the longevity of this great product; we couldn’t be happier to hear the news,” said Andrew McCullough, senior security engineer at Accor, one of the world’s largest hotel operators.
This acquisition enables Trustwave to provide organizations a proven, secure method of complying with the requirements of the PCI DSS directly related to business system credentials:
— Requirement 7: Restrict access to data by business need-to-know
— Requirement 8: Assign a unique ID to each person with computer access(1).
“Creduware’s technology synchronizes digital certificate lifecycle management and password management — areas that can present a challenge for even the most sophisticated organizations,” says Robert J. McCullen, chairman and CEO of Trustwave. “With Certificate Lifecycle Manager and Application Password Manager, we’ve delivered new identity management technology to our customers that can help them meet industry and regulatory standards.”
“Providing the CLM and APM software to Trustwave’s existing customer base will enable businesses and organizations throughout the world to more efficiently meet their compliance requirements mandated by standards such as PCI DSS,” said Brian Trzupek, Creduware’s founder, who will remain with Trustwave as director of product management.
Trustwave is a global provider of information security and compliance management solutions to businesses and the public sector. The company has provided service to more than 30,000 organizations throughout the world including banks, merchants, service providers and software developers that are required to validate compliance with industry best practices for safeguarding information endorsed by American Express, Discover, MasterCard Worldwide, Visa International and Visa USA. Trustwave is a leading certificate authority with thousands of secure sockets layer (SSL) certificates issued. Trustwave is headquartered in Chicago with offices throughout North America, Europe, Africa, Asia and Australia.
(1) Payment Card Industry Security Standards Council. Payment Card
Industry Data Security Standard. Version 1.1. September, 2006.