Gartner defines adversarial exposure validation (AEV) as technologies that deliver consistent, continuous and automated evidence of the feasibility of an attack. These technologies confirm how potential attack techniques would successfully exploit an organization and circumvent prevention and detection security controls. They achieve this by performing attack scenarios and modeling or measuring the outcome to prove the existence and exploitability of exposures. AEV is generally delivered as a SaaS solution with or without on-premises agents. AEV technologies provide automated execution of both simplified and/or extensible attack scenarios. Results data from an executed attack scenario is used for various outcomes, such as: validating a theoretical exposure as real, automating frequent controls testing, improving preventive security posture or improving detection and response capabilities.
Gartner defines custom software development (CSD) services as the professional services engaged by organizations to design, build, modernize or iterate custom applications and software products to meet their unique business needs. CSD services entail gathering business requirements and coding applications from inception, building applications on a platform as a service (PaaS), or assembling applications from existing web services or other reusable pieces of code. Services marketed as “software product engineering” or “digital product development” likely fall under the CSD services category as defined by Gartner. These solutions are typically not available as commercial off-the-shelf (COTS) products and require custom development.