Date:30/04/19
ImmuniWeb, a global provider of web, mobile and API security testing and risk ratings, expands its free community offering with a website security test. Initially designed for SMEs and organizations with nascent application security testing programs, large organizations with mature DevSecOps programs can also benefit from the service to quickly run hundreds of daily scans ensuring essential security and compliance of external web applications.
Once launched, the test will:
- Verify PCI DSS requirements 6.2, 6.5 and 6.6.
- Fingerprint versions of over 100 most popular CMS, web frameworks and over 165,000 of their plugins.
- Run a comprehensive vulnerability check for all known vulnerabilities in the fingerprinted software.
- Check over 20 HTTP headers related to security, encryption or privacy for strong configurations in line with industry best practices, including ones from OWASP.
- Assess Content Security Policy (CSP) to prevent some XSS and CSRF exploitation vectors, as well as variations of ransomware and Cryptojacking attacks.
Among almost 40 million public websites tested, only 9.74% contain up2date software, 2.07% satisfy the aforementioned PCI DSS requirements, and only 2.39% are protected with a WAF.
Ilia Kolochenko, CEO and Founder or ImmuniWeb, says: “Our free community offering enables our company to maintain sustainable relations with the community, get valuable feedback and actionable data on the global state of application security. We are excited to see a steadily growing number of users, many of whom later become commercial customers for our ImmuniWeb® AI offering.”
The website security test is now also integrated with the freemium ImmuniWeb® Discovery offering based on OSINT technology for non-intrusive discovery of an organization’s external attack surface. ImmuniWeb Discovery quickly builds a comprehensive inventory of an organization’s external web, mobile and cloud assets, providing an ultimate asset visibility to organizations of all sizes.
ImmuniWeb Launches Free Website Security and PCI DSS Compliance Test
ImmuniWeb, a global provider of web, mobile and API security testing and risk ratings, expands its free community offering with a website security test. Initially designed for SMEs and organizations with nascent application security testing programs, large organizations with mature DevSecOps programs can also benefit from the service to quickly run hundreds of daily scans ensuring essential security and compliance of external web applications.Once launched, the test will:
- Verify PCI DSS requirements 6.2, 6.5 and 6.6.
- Fingerprint versions of over 100 most popular CMS, web frameworks and over 165,000 of their plugins.
- Run a comprehensive vulnerability check for all known vulnerabilities in the fingerprinted software.
- Check over 20 HTTP headers related to security, encryption or privacy for strong configurations in line with industry best practices, including ones from OWASP.
- Assess Content Security Policy (CSP) to prevent some XSS and CSRF exploitation vectors, as well as variations of ransomware and Cryptojacking attacks.
Among almost 40 million public websites tested, only 9.74% contain up2date software, 2.07% satisfy the aforementioned PCI DSS requirements, and only 2.39% are protected with a WAF.
Ilia Kolochenko, CEO and Founder or ImmuniWeb, says: “Our free community offering enables our company to maintain sustainable relations with the community, get valuable feedback and actionable data on the global state of application security. We are excited to see a steadily growing number of users, many of whom later become commercial customers for our ImmuniWeb® AI offering.”
The website security test is now also integrated with the freemium ImmuniWeb® Discovery offering based on OSINT technology for non-intrusive discovery of an organization’s external attack surface. ImmuniWeb Discovery quickly builds a comprehensive inventory of an organization’s external web, mobile and cloud assets, providing an ultimate asset visibility to organizations of all sizes.
Views: 526
©ictnews.az. All rights reserved.
Similar news
- Cellphone Use May Raise Cancer Risk
- Australian police pushes cyber safety education
- Vietnam aims to lead in e-government
- Senate Website Gets Hacked
- US builds net for cyber war games
- Japan enacts anti-computer virus law
- India passes law vs e-waste
- Anonymous Declares War On The City Of Orlando
- Microsoft highlights evolving dangers as online identity data proliferates
- Consumers want internet security to be provided by banks
- Government facilities targets of cyber attack
- South Korean web attacks might been war drill
- Sri Lanka to Establish National Passport Database to Increase Border Security
- Hi-tech crime agencies set to employ information security professionals
- Phone hacking and online campaign bring down the News of the World
