Cloud Security Scanner

Features

• 

  Deep Vulnerability Assessment

  Weak Passwords

  Protects against FTP, SSH, RDP, SMB, SMTP, POP3, IMAP, MYSQL, MSSQL, MongoDB, MemCache, Redis, Oracle, Subversion, LDAP, PPTP, VPN, HTTP basis login, WebForm login form, and other threats

  
  

  Website Injections

  Safeguards your online infrastructure from SQL injection, command execution, code injection, SSRF injection, expression injection, JAVA expression injection command execution, deserialization, XPATH injection, and other injection vulnerabilities

  
  

  File Inclusions

  Manages local/remote file inclusion (LFI/RFI), arbitrary file read, arbitrary file upload, XXE, arbitrary file deletion, and more

  
  

  Logic Vulnerabilities

  Protects against JSON data hijacking, identity authentication security, verification code limitation bypass, business consistency security, business data tamper, authentication permission recall logic, business authorization (horizontal/vertical arrogation) security, business procedure derangement, and business interface calling security

  
  

  Front-end Vulnerabilities

  Ensures protection against cross-site (XSS) Request Forgery (CSRF), ClickJacking, Jsonp hijacking, HTTP head injection CRLF, and URL redirection

  
  

  Misconfigurations

  Manage and mitigate WebServer misconfiguration, middleware misconfiguration, and container misconfiguration

  
  

  Information Leaks

  Manage and control configuration file, test file, directory traversal attack, back-up file, SVN, GIT, compression package, temporary file, interface exposure, Heartbleed bug, and more

• 

  Comprehensive Detection of Related Assets

  Detection of Related Assets

  Comprehensively detects assets related to the target domain, such as sub-domains, Web server IP addresses, and provides detailed asset fingerprints. WTI can go further to comprehensively detect weaknesses to prevent any possible springboard attacks.

  
  

  Big Data Support

  Covers more than 100 million worldwide active IP and Web asset fingerprints, including versions of applications, operating systems, ports, protocols services, as well as SSL certificates and WHOIS data

• 

  Website Defacement and Malware Inspection

  Website Defacement

  Provides quick detection of any defacement on web pages, such as pornographic content, sensitive content, and other illicit content to help protect your brand image.

  
  

  Malware

  Monitors websites in real time by using multi-dimensional model integration, quickly detects any Trojans or malware injected into your web pages.

• 

  Instant Alert and Professional Reports

  Evidence and Resolutions

  Provides professional detection and resolutions for the vulnerabilities and threats.

  
  

  Instant Alert

  After detecting incidents, the system will provide instant alerts and notifications as an emergency response.

  
  

  Professional Reports

  Generates professional risk reports with expert analysis