The development team wants new commercial software to integrate into the current system.

Ask the development team to reevaluate the current program and have a toolset developed securely within the organization.

Request a copy of the most recent System and Organization Controls (SOC) report and/or most recent security audit reports and any vulnerability scans of the software code from the vendor.

Purchase the software, deploy it in a test environment, and perform Dynamic Application Security Testing (DAST) on the software.

Request a software demo with permission to have a third-party penetration test completed on it.