WHAT WE DO
Protect your website and database from cyberattacks.
As business owners demand ever-increasing amounts of features and functions for their websites, the risk of a successful cyberattack increases drastically. Hackers can inject malicious code into forms, issue database commands through your website’s login page, and steal sensitive user information with automated scanning tools.
That’s why it’s imperative that your website is being scanned regularly by a team of experienced ethical hackers who can identify and report vulnerabilities before they are exploited by cybercriminals.
With our website security plan, our team of ethical hackers will perform regular vulnerability scans of your website. You’ll be given detailed reports on what we tested, the methodology we used, what vulnerabilities were identified, and guidance on how to harden your website’s security.
From cross-site scripting (XSS) to SQL injections, we’ll simulate the thought process and attack methodologies of cybercriminals, and help you to secure any vulnerabilities we find in your website or webserver.
THE RISKS
What are the risks facing modern websites?
Webservers can be used as a launchpad for attacks against your users and your servers.
Websites are often used as a gateway to launch client-side and server-side attacks. Client-side attacks, such as cross-site scripting, allow an attacker to hijack the browsers of your visitors, steal session information, and even login as an administrative user.
Hackers can inject malicious code into your website and steal sensitive information.
As websites grow in complexity, the number of attack vectors that could be exploited by cybercriminals increases drastically. Even adding a simple contact us form to your website could be used by hackers to inject code, issue database commands, and steal highly sensitive information.
Websites are publically exposed, and even unsophisticated hackers can launch attacks.
As websites are publicly exposed on the internet, hackers don’t have to go far to find vulnerabilities. Additionally, there is an incredibly large suite of tools for attacking websites, allowing unsophisticated attackers to launch attacks.
Our Service
What vulnerabilities are we looking for?
Our assessments combine automated and manual scans of your website to identify vulnerabilities that could be exploited by cybercriminals. Our vulnerability scans are thorough and cover both server-side vulnerabilities and vulnerabilities within the application itself.
Our assessment includes a basic OSINT (open source intelligence) service to identify information leaks which could breach GDPR legislation or be used by hackers to attack your organisation. The information we will gather and assess includes, but is not limited to, document meta data, DNS records, social media posts, mobile telephone numbers, and more.
Business logic errors occur when a user performs an action on a website that the developers hadn’t anticipated. Business logic errors differ from technical vulnerabilities which are caused by the underlying code and configuration of the website, however they can pose serious security problems if they aren’t promptly identified and resolved. These types of vulnerabilities can be difficult to detect with automated scanning tools and they require an experienced hacker to manually inspect the website page by page.
With a single command, hackers can enumerate sensitive information from your website (such as email addresses and usernames) using automated scanning tools. Our ethical hackers will use a a combination of automated and manual tools to identify information leaking vulnerabilities from your website.
Every opportunity you offer your visitors to interact with your website – such as through a login page, a ‘contact us’ form, or even a comment submission form – can potentially be exploited by hackers to inject code into your server or steal sensitive information, such as password hashes. It’s for this reason that our ethical hackers will use a combination of automated and manual tests to identify dangerous vulnerabilities such as XSS or SQL Injections.
Our ethical hackers will analyse how your website manages user sessions to identify vulnerabilities such as session fixation, session hijacking, and problems with the randomisation of tokens.
A website is only as secure as the server it is running on. Hence why our assessments look for version disclosure, SSL misconfigurations, outdated software packages, and any unnecessary public-facing ports.
GETTING STARTED
Our simple four step process.
STEP ONE
Free consultation with our security experts.
Our initial meeting presents an opportunity to identify threats facing your organisation and plan our assessment correspondingly.
STEP TWO
We'll plan our assessment and seek your approval.
You’ll be required to sign our statement of work agreement, which outlines what we can and cannot do during the test.
STEP Three
Receive real-time reports through your client portal.
Once our assessment begins, you’ll receive real-time feedback on the vulnerabilities we discover in your systems.
STEP FOUR
We'll help you to remediate vulnerabilities.
Finally, our team of consultants will help you remediate the vulnerabilities we identified during the assessment.
CONTACT
Let's work together to secure your assets.
There’s no harm in talking. Drop us a line or give us a call and we’ll get back to you as soon as we can.
- 0141 212 0867
- hello@bluematrixsecurity.com