Ounce Labs

Ounce Labs was a United States security-software vendor founded in 2002 and headquartered in Waltham, Massachusetts. Its principal business was the development of software analysis technology designed to identify security weaknesses in application source code. Rather than focusing only on vulnerabilities discovered after deployment, the company’s approach examined code during the software-development process, helping organizations find and remove defects that could expose applications to attack. The company’s technology supported analysis across a broad set of programming languages and development environments, including ASP.NET, C, C++, C#, other .NET languages, Java, JavaServer Pages, Visual Basic .NET, and classic ASP. Its platform support included Windows, Solaris, and Linux. This language and operating-system coverage positioned Ounce Labs for use in heterogeneous enterprise development environments, where applications were built with multiple languages and deployed across different systems. Ounce Labs served enterprise and public-sector customers. Publicly identified users included GMAC, Lockheed Martin, and the U.S. Navy, indicating that its software was relevant to organizations with substantial requirements for application security, code quality, and risk management. The available reference material does not provide detailed information about the company’s revenue, funding, employee count, founders, or a complete customer roster. A major turning point came on July 28, 2009, when IBM acquired Ounce Labs for an undisclosed amount. IBM stated that it intended to integrate Ounce Labs’ capabilities into its Rational Software business. The acquisition placed Ounce Labs’ source-code security analysis within IBM’s broader software-development and application-security portfolio. Subsequent IBM materials associated the technology with IBM Security AppScan Source. As a result of the acquisition, Ounce Labs ceased to operate as an independent brand in the form described by its standalone company profile. Its principal legacy is the incorporation of source-code vulnerability analysis into IBM’s enterprise application-security offerings.

Ounce Labs was established in 2002 in the United States and developed security software for analyzing application source code. Its work addressed a central problem in enterprise software development: vulnerabilities can be introduced while applications are being written and may remain difficult or expensive to correct once systems have been released. Ounce Labs’ technology was intended to inspect code and identify weaknesses that could leave an application open to attack, allowing development and security teams to address defects earlier in the software lifecycle. The company was based in Waltham, Massachusetts, a location associated with the technology and software industries in the Boston metropolitan area. Its product supported a range of programming languages used in enterprise and web application development. These included ASP.NET, C, C++, C#, other .NET languages, Java, JSP, VB.NET, and classic ASP. The software also supported Windows, Solaris, and Linux environments. This breadth enabled the company to address organizations operating mixed technology stacks rather than limiting its analysis to a single programming language or deployment platform. Ounce Labs’ customer base included large commercial and government organizations. Publicly cited customers were GMAC, Lockheed Martin, and the U.S. Navy. These references suggest that the company’s software was used in environments where application security, operational reliability, and protection of sensitive systems were significant concerns. However, the available source does not document the full scope of customer deployments, product pricing, corporate ownership before acquisition, or the company’s financial performance. On July 28, 2009, IBM acquired Ounce Labs for an undisclosed sum. IBM’s stated intention was to integrate the company into its Rational Software business, which provided tools and services supporting software development and delivery. The transaction gave IBM access to Ounce Labs’ source-code analysis capabilities and strengthened the application-security dimension of its development-tool portfolio. After the acquisition, Ounce Labs no longer functioned as an independent vendor in the manner described before 2009. IBM subsequently presented related technology through IBM Security AppScan Source. The available material does not specify the exact technical transition between the Ounce Labs product and later IBM offerings, nor does it provide a detailed chronology of product releases. Nevertheless, the acquisition established Ounce Labs as an acquired technology brand whose principal contribution was the integration of static source-code security analysis into IBM’s enterprise software and application-security portfolio.

1. 2009Acquired by IBM

   On July 28, IBM acquired Ounce Labs for an undisclosed amount and planned to integrate its technology into the Rational Software business.

   Source
2. 2002Ounce Labs founded

   Ounce Labs was established as a security-software company focused on analyzing application source code for vulnerabilities.

   Source

Enterprise application-security software focused on analyzing source code for vulnerabilities before applications were deployed.

• Ounce Labs source-code security analysis softwareStatic application security testing

  Ounce Labs developed software that analyzed application source code to identify security vulnerabilities. The technology was intended to help organizations detect and remove weaknesses that could leave applications exposed to attack. It supported numerous enterprise programming languages, including ASP.NET, C, C++, C#, Java, JSP, VB.NET, classic ASP, and other .NET languages, with platform support for Windows, Solaris, and Linux.

• IBM Security AppScan SourceSource-code application security

  IBM Security AppScan Source is identified in the reference material as the IBM offering associated with Ounce Labs' source-code analysis technology. The available source does not provide enough detail to establish a complete product history or specify which Ounce Labs features were carried forward.

• 2009IBM acquisition and Rational Software integrationM&A

  IBM sought to expand its software-development and application-security capabilities through Ounce Labs' source-code analysis technology.

  What changed. IBM acquired Ounce Labs on July 28, 2009, for an undisclosed amount and announced plans to integrate the company into IBM Rational Software.

  Aftermath. Ounce Labs ceased to operate as an independent brand, while related capabilities became associated with IBM Security AppScan Source.

  Source

• 2009IBM acquires Ounce Labs

  IBM acquired Ounce Labs on July 28, 2009, for an undisclosed amount and planned to integrate its source-code security analysis technology into IBM's Rational Software business.

  M&A
  Source

1. Ounce Labs