Vigilar’s Web Application Assessment Service

Vigilar’s Web Application Assessment uncovers hidden vulnerabilities in Web application components and provide the deep analysis that uncovers hidden weaknesses as data moves from database to server to the Internet, and back again. Vigilar’s comprehensive, easy-to-understand reports detail what was found, how those potential weaknesses might impact business, and provide recommendations for how best to remediate the threats.

The Web Application Assessment Service Process
After removing the false positives, the tester performs a risk review to assign the appropriate risk level to each of the vulnerabilities discovered during testing. The risk level is determined by evaluating the probability that the vulnerability could be exploited along what data or systems could be compromised by a malicious hacker if the vulnerability was exploited. Remediation recommendations are provided for each vulnerability, including Vigilar Best Practices on effectively remediating the identified vulnerabilities.

After removing the false positives, the tester performs a risk review to assign the appropriate risk level to each of the vulnerabilities discovered during testing. The risk level is determined by evaluating the probability that the vulnerability could be exploited along what data or systems could be compromised by a malicious hacker if the vulnerability was exploited. Remediation recommendations are provided for each vulnerability, including Vigilar Best Practices on effectively remediating the identified vulnerabilities.

1. SQL Injection
2. Cross-Site Scripting (XSS)
3. Client-Side Pricing
4. Parameter Injection
5. Directory Traversal
6. Buffer Overflow

1. Report—focuses on providing customer with the following key objectives:
   • An Executive Summary that summarizes security exposures discovered in the assessment and the potential impact upon the organization
   • A Management Report that details operational issues related to Web application vulnerabilities that were discovered
   • A Technical Report that details the identity and location of vulnerabilities
   • A Solutions Recommendation Report that helps staff begin the process of prioritizing remediation efforts, with strong emphasis on reducing the greatest risks to the enterprise first
   • PCI Compliance Summary describing how this assessment maps to specific sections of PCI in regards to Web Application security
2. Emergency Notification upon discovery of any critical vulnerability
3. Technical Conference Call to review vulnerabilities with support staff and the appropriate changes that should be made to remediate

1. Comprehensive review of Web application components using automated tools as well as hand validation by Vigilar security experts
2. Tiered levels of service for businesses of varying sizes
3. A complete set of reports that address the needs of both senior managers and technical staff
4. Guidance for prioritizing and fixing discovered vulnerabilities

1. Delivers rapid, accurate and non-invasive discovery of the security weaknesses in Web applications
2. Provides comprehensive assessments without requiring the purchase of hardware, software or staff
3. Assigns a risk level to Web application vulnerabilities to help structure and simplify remediation efforts
4. Integrates business and technical concerns associated with Web application vulnerabilities for faster, more productive remediation efforts