SOURCE: Hubspan


June 22, 2010 09:00 ET

Hubspan Updates Its WebSpan SaaS Integration Platform With "Security 360"

Hubspan Strengthens Its Advanced Security Capabilities Around Data Encryption, Access Controls, Policy Enforcement and PCI DSS Compliance

SEATTLE, WA--(Marketwire - June 22, 2010) - Hubspan, the leading provider of cloud-based business integration solutions, today announced the availability of an integrated Security 360 approach for its WebSpan SaaS Integration Platform. With this release, Hubspan builds on its market leadership in the cloud integration industry and further strengthens its already robust cloud security capabilities. The Security 360 features enhance several existing security areas, including data encryption, key management, access controls and policy enforcement. It also aligns with Hubspan's ongoing adherence to PCI DSS compliance and fulfills the latest version of the 2010 Top Ten Most Critical Web Application Security Risks published by the Open Web Application Security Project (OWASP).

Security continues to rank as the top concern for companies considering or deploying cloud-based solutions or applications. According to the initial results of a comprehensive cloud security survey conducted by Hubspan (to be released next month), nearly three quarters of respondents (71 percent) listed the ability to secure data as a top priority when considering cloud computing. The survey also found that 86 percent of respondents ranked data protection as the top criteria when deciding whether to move applications to the cloud.

"Hubspan is committed to providing our customers and partners with industry leading solutions and best practices around cloud security, and this release is further testament to that commitment," said Trisha Gross, president and CEO at Hubspan. "Hubspan built the integration industry's first cloud platform, and we will continue to lead the industry in innovation and improvements related to cloud security and compliance."

Key Features in Security 360 include:

  • Additional Layers of Key Management

    • This release builds additional layers to WebSpan's existing key management capability, which ensures secure generation, distribution and storage of cryptographic keys, such as implementing a key encrypting key (KEK) to secure the data encryption keys (DEK).

  • Enhanced Data Encryption

    • WebSpan implements a strong industry standard for document cryptography, ensuring that all messages are protected throughout all phases of transaction processing, both at rest and in transit. Data encryption at rest has been reinforced beyond payment and financial data (such as P-card data) to cover all messages on the Hubspan platform during an at-rest state.

    • This release also implements a "Secure by Default" data encryption status of all messages, regardless of transport or business process while also providing the option to optimize the payload based on the kind of data being used.

  • Updated Access Control Rules

    • WebSpan includes continued PCI DSS (PCI Data Security Standard) compliance by strengthening strict access control rules to limit and tightly control access to sensitive data.

  • Secured Visibility

    • WebSpan captures the data necessary to create audit trails, identify pattern and failure trends, perform network traffic analysis, and provide related reports. 

  •  OWASP Top Ten

    • To add further protection against security breaches, WebSpan addresses the recently updated 2010 Top Ten Most Critical Web Application Security Risk issues published by the Open Web Application Security Project (OWASP). OWASP is an open community that develops a top ten list of security risks and recommendations with the primary aim to help organizations develop better risk management processes and address the top risks associated with the use of web applications in an enterprise.

As further recognition of Hubspan's innovation and commitment to security, the company was recently awarded a patent for a cloud security technology and process. The patent, announced separately by Hubspan yesterday, enables Cryptographic Key Brokering capabilities to securely translate information between systems having different security management. Hubspan is using this patented technology today to enable customers to maintain compliance to strict internal and external security mandates.

For more information, visit or email

About Hubspan Inc
Hubspan is the leading provider of business integration solutions, helping companies automate business processes across internal and external communities. Hubspan's flagship solution is the WebSpan SaaS Integration Platform. An enterprise-class solution, WebSpan combines Hubspan's innovative, cloud-based platform and managed services with IBM WebSphere integration software. Thousands of companies, from small enterprises to the Fortune 500, successfully use the platform every day for secure, reliable and scalable business integration. WebSpan is available in packaged integration processes, from managed file transfer, PO, e-invoicing and punchout to full business processes, such as Supply Chain, Demand Chain, Advanced EDI and eCommerce integration. For more information, go to or email