The SPI Dynamics Assessment Management Platform (AMP) is an appliance-based offering. The core component is the WebInspect application. AMP builds on this by creating a hierarchy to allow for users in different roles such as a CIO, security administrator, engineering manager, QA tester and a developer to have defined permissions to the AMP.
Each user role can run subcomponents or all components of the WebInspect software, which looks for the security vulnerabilities in published web code. Administration and use of the AMP appliance take place through a web browser and a user ID/password combination. The architecture contains an AMP server, a sensor, WebInspect interactive and the AMP Windows-based console.
The installation of the appliance was a little more difficult than other devices we have tested. The AMP appliance was built from standard Dell hardware that was easy enough to use, but since the solution is Windows-based, we missed some of the common Linux appliance features, for example a configurable front panel to set basic functions such as IP address, netmask and default gateway.
We had difficulty finding an appropriate DVI adaptor to bridge the connection to our SVGA flat panels. Once again, a Linux-based operating system underneath would allow for a terminal console into the device, eliminating the need for the onboard video. To rectify the problem we had to remove the default video card and replace it with a standard SVGA card.
SPI Dynamics AMP arrived with a guide for the initial installation in hard copy. Online help files were also available for the WebInspect application.
The vendor offers pre and post-sales support, education and training, as well as a self-service portal to a knowledgebase.
The pricing for Assessment Management Platform starts at £36,000, which places it at the upper end of the price spectrum. For many smaller organisations the cost may be prohibitive and sticking to WebInspect may provide better value.