-
-
184 Cambridge Science Park, Cambridge CB4 0GA
Vulnerability Assessment
Vulnerability Assessment At ValMIND
Testing your ecommerce store is vital to ensure malicious attack attempts don't exploit poor configuration, out of date patching, cross-site scripting or injection vulnerabilities of the underlying web application. ValMIND will undertake a website vulnerability assessment to include:
+ With weaknesses exposed, you're able to proactively protect both your business and clients from data theft.
+ Identification of the website structure and active code (i.e. web pages providing functionality)
+ Discovery of inputs to the web applications supporting your ecommerce and test for security vulnerabilities
+ Uniquely ValMIND will search for malicious web shells which we have uncovered from the numerous PCI PFI investigations undertaken
Ecommerce Website Vulnerability Assessment
Vulnerability management plays an indispensable role in maintaining security throughout the web application life cycle. Vulnerability management depends on vulnerability scanning for evaluating an app, where developers may not have direct access to all source code or administrators to the underlying server configuration. ValMIND’s vulnerability assessment service enables organisations to quantify and qualify security risks and apply resources to re-mediate those risks in the most efficient manner; helping to safeguard an organisation through:
- Identifying business systems and processes which may result in financial loss.
- Preventing revenue loss from internal fraud through employees or externally through hackers
- Providing due diligence and compliance to your industry regulators, customers and shareholders
- Protecting an organisation’s brand by avoiding loss of consumer confidence and business reputation
The Report
The report will provide a current snapshot of the security state for the target systems. Where possible, vulnerabilities discovered will be referenced against vulnerability databases (CVE, NVD, OSVDB, etc) and ValMIND will provide guidance on steps to mitigate. The report will provide distinct sections for the expected audiences of the report and will include:
+ An Executive Summary that describes the risks present in a non-technical manner and therefore providing overall context in a business sense
+ A Technical Summary providing an abbreviated tabular format targeted at the technical managers
+ Detailed technical vulnerability description, outlining the technical risk, and recommendations on how to mitigate the effects.
