About
As more and more companies go online so too do nefarious criminals looking to take advantage of them. In the world of the web security the key is in making sure that your site is secure and private user information is kept secret and safe.
What’s the Process?
Website security is integral to any site now, especially when it comes to complying with data rules and regulations. Keeping your users’ data safe and secure along with your site is vital to maintaining trust with your users.
Reconnaissance
We will need to dive into your website front-end and back. What we do here is to look for any vulnerabilities and weaknesses that could be taken advantage of to gain access to your website or worse.
Attack
Once we have found a weakness we will need to test it; using a controlled environment we will attack the website and attempt to exploit the vulnerability. If we can do it then so can criminals.
Resolving the Vulnerabilities
Once a vulnerability is found and tested we will start work on finding ways to fix the problem. Using the information we gained from the attack stage we should be able to resolve the issue and patch up the vulnerability.
Reporting
At this point all vulnerabilities should have been found and resolved, so we will write up a thorough report on every flaw and fixes that we used in an easy to understand way. This report will cover all information about work done and vulnerabilities fixed.
The Tools We Use
Web Exploit Detector
Our Lead Programmer Simon Pugnet developed a tool to assist him as he scoured websites for vulnerabilities. This tool will go through an entire server of websites and flag every file which is potentially infected. It will also log information as to what the infection may be.
OWASP Zed Attack Proxy (ZAP)
ZAP is a widely used open source web app scanner. It is a trusted and well documented tool for scanning, accessing and testing a system for vulnerabilities.
Python, cURL, etc.
Naturally web security involves diving deep into the code behind the site so to help with this we use a variety of libraries and programming languages.
Why SquareFlame?
Since our Company began we have heavily worked in web development, naturally this means we have had to learn a variety of skills to be able to handle and process web dev. As the years went by and web tech was thrust into the spotlight an arms battle was begun. We keep our skills sharpened every year making sure that any potential security threats are neutralized.