BOOK YOUR APPOINTMENT FOR A

FREE PENETRATION TEST DEMO

A leading security scanning platform built by leading penetration testing experts

Application & Infrastructure Scanning

A leading security scanning platform that automates the discovery of security flaws within your websites, applications, network, and cloud infrastructure.

Secure development

life cycle

Assessments can be conducted throughout the application life cycle from development to production. Integrates with common development tools.

 Intuitive & flexible

configurations

Scans can be launched in seconds using pre-defined scan profiles. Each finding within the report includes a detailed narrative and easy to understand remediation advice.

 Unlimited testing and

unlimited users

All licences provide unlimited users and unlimited scanning 24 hours a day 365 days a year.

ORGANISATIONS WHO CURRENTLY BENEFIT FROM THE PLATFORM
ebay logo

ebay

skype logo

skype

Marstons logo

Marstons

Amigo Loans logo

Amigo Loans

AXA Logo

AXA

Capita Logo

Capita

WHSMITH LOGO

WHSMITH

Iceland logo

Iceland Logo

Which logo

Which

Jet2 logo

Jet2

NHS DIGITAL LOGO

NHS DIGITAL

SECRO LOGO

Secro

Vulnerability management dashboard

The dashboard provides a customisable view of your security posture at any given moment in time. The status of discovered vulnerabilities, emerging threats and remediation progress are all displayed using easy to understand dashboard widgets.

Intuitive & flexible configuration

Whether you just want to run a quick scan, our software allows complete flexibility. Scans can be run in a few clicks using profiles built by our security experts or built from scratch using the profile editor.

Automatic vulnerability management

A built-in workflow management system that allows individual findings to be assigned to a member of the team. Remediation progress can then be tracked visually through the main dashboard. A rescan against each vulnerability can be performed with a single click to test the effectiveness of applied fixes. Scans can also be configured to automatically rescan when a vulnerability is marked as fixed.

Scheduling

Scans can be configured to adhere to a specific schedule to allow for testing out of hours or during specific testing windows. Each scan can be configured on a repeat cycle to ensure scans are run continuously to catch new vulnerabilities as soon as they are introduced.

DID YOU KNOW?

It can be difficult from an internal resource and cost point of view to keep with an ever changing threat landscape. Our tool and managed penetration testing service mitigates this.

KEY TECHNICAL FEATURES

Zero day detection

Detect security flaws by adopting a first principles methodology rather than firing checks from a known vulnerability database. This approach successfully identifies security flaws within that are previously unknown and undisclosed.

Browser-based crawler

a browser-based crawler that combines application modelling techniques and subtle heuristical cues to automatically discover the complete attack surface of any given application in the shortest time possible.

 Easy to use scripting language

An easy to use scripting language named GoScript which can be used to navigate and scan complex workflows and single page applications.

Seamless API integration

A JSON based API is available as standard to provide integration with development tools and other systems. The API can be used to drive scans and retrieve results as part of your continuous integration and development processes.

Safe exploitation

Many of the scanning modules include an option to safely exploit vulnerabilities so that real business impact can be demonstrated to all stake holders from board level to the development team.

 OWASP Top 10

Web application scanning covers all known vulnerability classes including all of the OWASP top 10. Easily view and manage all your known OWASP top 10 vulnerabilities in customisable dashboards, scans and reports.

DID YOU KNOW?

Only 52% of large businesses and 23% of high-income charities carry out Penetration Testing

Frequently Asked Questions

  • What is Penetration Testing and why should organisations do it?

    • Software designed to assess your websites, web applications and infrastructure for vulnerabilities
    • It allows you and your business to be proactive in discovering vulnerabilities
    • Gives you remedial advice on discovered vulnerabilities
    • Reduces risk and gives an overview of an organisations threat landscape
    • Helps you to find and fix vulnerabilities before a hacker does

  • Pros of the platform

    • Find the most vulnerabilities within websites/web applications. 
    • Built, maintained and developed by penetration testers
    • Offer high levels of support
    • Can scan multi-stage platforms and complex authenticated sites
    • Easy to use interface (only if not managed by JC Cyber Security)
    • We offer easy to follow remediation advice
    • Offer very good value for money

  • My Firewall already protects my business and my application

    • Organisations spend millions on expensive firewalls but they still get breached. 
    • If a hacker has decided to target your company they WILL find a way round the firewall. 
    • Recent large profile companies that this has affected: British Airways, Equifax and the whole of the NHS.
    • If you look at it from the perspective of your house – a firewall is essentially making sure your windows and doors are shut. However you still need to make sure they are locked so no one breaks in!

  • I use Third Party Developers and Hosting Providers

    • Does your third party hosting provider do regular security checks? Why don’t you take a free demo and you can make sure that it is getting regularly checked. 
    • If the website was to be hacked – Who would be in the newspapers? If you own the website then you need to make sure its secure. 
    • Michael Page got hacked in 2016 – they pointed the finger at their hosting provider Capgemini. This made no difference as 100’s of thousands of candidates CV’s were lost in the data breach – this was awful PR for Michael Page

  • We have Manual Penetration Testing carried out once a year

    • The platform compliments manual penetration testing
    • Manual penetration testing is a one off test – the platform gives you unlimited testing across your licenced period.
    • Manual penetration testing is expensive. Average cost per day ranges from £850.00 - £1,250.00. 
    • With Manual penetration testing there is no way of checking the fixes you have made have been carried out without having to manually retest again

YOU MAY ALSO LIKE...

paper_plane

MAILING LIST

Sign up and stay up-to-date wIth the latest Cyber Security Trends

Sign Up

SPEAK WITH A CYBER EXPERT TODAY

Fill in the form or call us on 0333 305 0605 and one of our Cyber Security experts will be happy to assist you

Share by: