Srinath Anantharaju, a member of Google’s Security Team  posted in Google’s Security Blog the availability of "Lemon" , a new web application security fuzzer developed by Google.

The tool has not been made public, nor is it going to be, in the near future,  Srinath says. It’s just too custom built for Google applications.

This whole story makes me think about 2 issues :

1. Is Google interested in offering web security services to it’s customers ? it’s like "We already have all your URLs harvested by our googlebot , and we also have this great balck box fuzzing technology; so we can find any vulnerable parameter in seconds"
2. Is there a new Google product on it’s way which require a careful web application assessment ? ( something  whcih require PCI compliance perhaps ? )

I guess we’ll wait and see; anyway it’s good to see the giant G getting involved in application security .

Share This

If you enjoyed this post, make sure you subscribe to my RSS feed!