Vulnerability Scanning | Top Companies Providing Vulnerability Scanning Solutions

Snyk

Crunchbase | Website | Twitter | Facebook | Linkedin

Snyk helps software-driven organizations find and fix vulnerabilities in open source dependencies and container images. The company is a developer-first security company that helps organizations use open-source code and stay secure.

The startup provides a tool that is used by developers to scan their code for vulnerable open-source components. Most enterprise applications incorporate open-source components and consequently are vulnerable to any security exploits that may be hiding in those files.

Snyk’s tool flags exploits and gives developers tips on how to fix them. Developers can plug the tool into the existing code editors in which they write their applications and receive alerts about security issues directly inside the interface.

The vulnerability alerts that Snyk generates are drawn from an internal database of software security flaws. In 2015, Snyk was launched by Guy Podjarny, Danny Grander, and Assaf Hefetzbased in London, England..

Checkmarx

Crunchbase | Website | Twitter | Facebook | Linkedin

Checkmarx is an application security software company, whose mission is to provide enterprise organizations with application security testing products and services that empower developers to deliver secure software faster. Amongst the company’s 1,500+ customers are 5 of the world’s top 10 software vendors and many Fortune 500 and government organizations, including SAP, Microsoft, and Salesforce.com.

For more information about Checkmarx, visit http://www.checkmarx.com or follow us on Twitter: @Checkmarx Checkmarx solutions’ key advantages include: – Reducing the time spent by the development team on security vulnerability fixing by up to 75% in comparison with first generation static code analysis solutions. – Easy to use – less than one hour installation and immediate ability to scan – Unique patented Virtual Compiler technology enables scanning un-compiled and un-built source code which allows detecting vulnerabilities from the earliest stages of the software development cycle – Full integration with the SDLC that enables security scans during any stage of development – Available in both “On Premise” and “On Demand” configurations Checkmarx customers include hundreds of Fortune 500, government and SMB organizations in over 30 countries..

Netsparker

Crunchbase | Website | Twitter | Facebook | Linkedin

Founded in 2009, Netsparker Ltd develops a leading-edge web application security solution. The combination of dead accurate scanning with proprietary automatic exploitation technology brought Netsparker early success, and the company is now a recognized leading player in the web application security industry.

Netsparker can identify vulnerabilities in all types of modern web applications, regardless of the underlying architecture or platform. Upon identifying an exploitable vulnerability, the Netsparker scanner uses unique Proof-Based Scanning™ technology to generate a proof of exploit that shows the result is not a false positive.

Netsparker is available as desktop software, a managed service, or an on-premises solution. It is trusted and used by world-renowned organizations from all industry verticals, including Samsung, NASA, Microsoft, ING Bank, and Ernst & Young..

Intruder

Crunchbase | Website | Twitter | Facebook | Linkedin

Intruder is a cloud-based vulnerability scanner that finds cyber security weaknesses in your external infrastructure. Everything we do is designed to save you time, we are here to worry about your security, so you don’t have to.

Intruder integrates with cloud providers as well as popular software development tools, so you can easily manage your cloud targets, notify your team about security issues in real time and push discovered vulnerabilities to your issue tracking platform for remediation.. .

RedShield Security

Crunchbase | Website | Twitter | Facebook | Linkedin

RedShield is one of the most effective web-application defence systems you can buy. Put simply, we are experts in web-application vulnerability remediation as a service.

WEB-DEFENCE: RedShield redefines what a web-app protection service should do. We are the world’s first web-application defence system to be targeting 100% vulnerability mitigation.

This impressive goal can only be achieved using our advanced shielding technology, allowing us to create designer shields for every application vulnerability found. As more and more attacks are being launched every day, it is virtually impossible to be able to ‘100% protect you.’​ What we do instead is attempt to shield and deflect every attack against every vulnerability found in your systems.

ZERO TOUCH: All of this is achieved without a single update to your back-end code. Simply pass your web-traffic through RedShield, and our team of global security experts will break down and analyse every vulnerability scan and pen-test result found.

Our systems will then provide and deploy the necessary shields. If your issue is truly unique then our 24x7x365 expert defence teams will tailor the shield(s) your applications needs, and not only the technical flaws, but we can also shield logic flaws too.

INSIDE AND OUT: We can also shield web-apps via our global RedShield Cloud or even your internal apps with our RedShield Private Nodes. In short, we provide all the systems and expertise to make it work..

Tinfoil Security

Crunchbase | Website | Twitter | Facebook | Linkedin

They make website security regular, affordable, and easy. They crawl your site, a bit like Google, but instead of looking for text and HTML they look for common vulnerabilities in your website.

They act as external hackers, picking through each access point on your website, trying to get in. If they are successful, they record where and how they did it, then report back to you! Their custom scanner combines the best (hand-picked, and hand stitched together) pieces of popular open source tools, along with other, custom tools built in-house (their “secret sauce”) to provide you with the best results.

They provide precise vulnerability information, including specific input requests and vulnerability locations. Once you understand what you’re dealing with they will provide you with vulnerability fixes tailored toward your specific software stack..

i7 Networks

Crunchbase | Website | Twitter | Facebook | Linkedin

100% Agentless & non-intrusive way, we provide security to BYOD-enabled Enterprises by detecting & fingerprinting all personal devices, complete security scan & analysis of the devices, protecting Corporate Network from BYOD specific infections and intrusions and doing a thorough granular access control using device attributes as well as Apps. Detailed Value proposition: 100% Agentless-way (ZERO-Touch) of detecting all personal devices, secure quadrupled fingerprinting (US patent-pending), DPI & thorough security scan & analysis (Vulnerability check, associated risks, thorough BYOD specific intrusion alerts, Device compromise check (jailbroken, rooted), BYOD specific network behavioral analysis to see patterns, anomalies & zero-day attacks.), posture check (anti-malware software is installed on the device? latest signatures?) and then deny infected personal device connecting to the network as well as do a thorough granular access based on device attributes as well as apps.

We do it irrespective of how you get onto the network – from Corporate Wi-Fi or VPN. We also detect enterprise-worry apps (such as dropbox, box.net, Facebook etc.) on the wire and we can even stop them.

We also provide granular access control based on any of the attributes of the devices that we discover (such as macid, ip address, OS, OS version, SSID, office location, time, form factors, device class & type & manufacturer etc.) – all done at real-time! We protect BYOD-enabled Enterprise from the BYOD specific threats. We have developed lot of technologies which are mobile specific and are innovations by itself be it “Agentless discovery & fingerprinting” of all personal devices or the malicious/intrusion detection which are specific to again BYOD.

“We are the Homeland Security for you Enterprise!!” To Know and to Protect! Protect your Corporate Network & Assets from infections that personal devices of your mobile-workforce pick up on the field.. .

ON Security

Crunchbase | Website | Twitter | Facebook | Linkedin

The ON-Security operates in the area of ​​Information Security with tracking, detection and resolution of vulnerabilities and weaknesses of online websites through their own, unique and pioneering system in Latin America, using the most advanced technologies to prevent hackers and crackers changing corporate and institutional information. The acronym ON-S comes online security.

Providing online security against a background in which cyber attacks increase every day is our motivation. Besides being the only company with wholly domestic technology, innovative processes linked to work, always trying to offer the most sophisticated in the field of information security..

Acunetix

Crunchbase | Website | Twitter | Facebook | Linkedin

Acunetix is the market leader in automated web application security testing, and is the tool of choice for many Fortune 500 customers. Acunetix detects and reports on a wide array of web application vulnerabilities.

The industry leading crawler fully supports HTML5 and JavaScript and AJAX-heavy websites, allowing auditing of complex, authenticated applications. Acunetix provides the only technology on the market that can automatically detect out-of-band vulnerabilities and is available both as an online and on premise solution.

Acunetix also includes integrated vulnerability management features to extend the enterprise’s ability to comprehensively manage, prioritise and control vulnerability threats – ordered by business criticality. Acunetix is a privately held company with its offices in Malta and the UK.

It is a Microsoft Certified Partner. It also has a sister company 3CX, a developer of IP PBX software for Windows..

Secr Secure

Crunchbase | Website | Twitter | Facebook | Linkedin

Secr Secure creates tools and services that allow software developers to scan for security vulnerabilities.

HTTPCS

Crunchbase | Website | Twitter | Facebook | Linkedin

HTTPCS, expert in application security offers every tools and services required to protect you against cyber risks, hacking and data theft. Technological innovation, personalized aftercare and support of each client are at the heart of the development of HTTPCS solutions to always better satisfy their customers and optimize their web security.

So, new security flaws not limited to OWASP top 10 and CVE are added daily to the HTTPCS. Next generation of Vulnerability Scanner, HTTPCS SECURITY daily ensures web security as well as the protection of application and system perimeters.

Its advanced mapping offers the most reliable and efficient tool to keep website secured. Working tool for web developers, CTO, CISO, HTTPCS provides an optimum protection that evolves at the same pace as technological migrations, including in the cloud..

nCircle Network Security

Crunchbase | Website | Twitter | Facebook | Linkedin

nCircle Network Security, Inc. provides agentless security risk and compliance management solutions.

The company’s products include IP360, the vulnerability and risk management solution that provides reporting, vulnerability prioritization, and remediation workflow designed to enable risk reduction; and Topology Risk Analyzer, which prioritizes vulnerabilities utilizing intelligence about the network layout. Its products also include Security Intelligence Hub, an open-architected reporting and integration point for collecting and sharing network intelligence across the enterprise security ecosystem; and nTellect, a threat prioritization system that leverages IP360’s updated network intelligence to improve the accuracy and effectiveness of Cisco and McAfee’s IDS and IPS.

In addition, the company’s products include Certified PCI Scan Service, an automated network security scan and reporting service, which enables customers to monitor and report on compliance with the PCI security standard; and Security Policy and Regulatory Compliance Solutions that compliance with internal security policies and automate security process, as well as support government- regulatory compliance solutions for FISMA and IAVA. It also provides configuration and regulatory compliance, reporting and analytics, and government solutions.

The company offers vulnerabilities and exposures research team, consulting, and training services. Its security solutions are used by financial services, energy, utilities, retail, consumer goods, healthcare, pharmaceuticals, government, media, leisure, and technology enterprises, as well as government agencies and service providers to identify, measure, manage, and reduce security risk and automate compliance on their networks.

The company was formerly known as Hiverworld, Inc. nCircle Network Security, Inc.

was founded in 1998 and is headquartered in San Francisco, California with regional offices in Atlanta, Toronto, and London.. .

Defendassist IT Security GmbH

Crunchbase | Website | Twitter | Facebook | Linkedin

Attackdroid Vulnerability Scanner

Application Security

Crunchbase | Website | Twitter | Facebook | Linkedin

Application Security, Inc. provides database security, risk, and compliance solutions for enterprises in the United States and internationally.

The company offers DBProtect, a managed enterprise solution for database security that provides database scanning, vulnerability assessment, and activity monitoring in an enterprise suite; and AppDetectivePro, a network-based database vulnerability assessment scanner that discovers database applications within infrastructure and assesses their security strength, as well as locates, examines, reports, and fixes security holes and mis-configurations. It offers its products for activity monitoring, auditing, compliance, continuous monitoring, cost optimization, database security, information protection, operational efficiency, patch gap management, policy enforcement and management, remediation and response, risk management, threat intelligence, and vulnerability assessment applications.

The company enables organizations to extend existing data protection measures to include the database for security and compliance. It serves government organizations and companies in banking and financial services, health care and life services, manufacturing, transportation, energy, and communications industries.

Application Security, Inc. has strategic relationships with Archer, ArcSight, HP, IBM, McAfee, Microsoft, Oracle, and Sybase.

The company was founded in 2001 and is based in New York, New York with additional offices in North America and the United Kingdom.. .

HackerTarget.com

Crunchbase | Website | Twitter | Facebook | Linkedin

HackerTarget.com began in 2007 as a project that would enable people to test firewalls externally with an online port scanner. Since those early days the site has developed into a complete vulnerability scanning solution; offering an easy and convenient way to access a range of powerful open source security tools.

By utilizing hosted security testing tools, organisations are able to test their Internet perimeter and servers from an external perspective. Many organisations have firewalls or intrusion prevention devices that make testing of the perimeter from an internal system ineffective and prone to errors.

More accurate results are possible by probing from the perspective of actual attackers (ie. from the Internet).

Not everyone who runs a website or Internet connected hosts can afford a dedicated network security team. HackerTarget.com scanners assist in the assessment of perimeter firewalls, websites and Internet servers.

In addition they can be used to validate results from commercial vulnerability testing products. The name Hacker Target comes from the fact that everyone really is a target.

It does not matter that you are a small profile organisation, or you do not store credit cards on your systems. Attacks may be targeted at your organisation or you may be merely a target of opportunity..

SAINT Corporation

Crunchbase | Website | Twitter | Facebook | Linkedin

SAINT develops security software including integrated vulnerability assessment, penetration testing, configuration auditing, and compliance. SAINT uncovers areas of weakness in the network and recommends fixes.

With SAINT you can: Identify vulnerabilities on network devices, operating systems, desktop applications, Web applications, databases; Detect and fix possible weaknesses in your network’s security before they can be exploited by intruders; Go beyond simply detecting vulnerabilities to safely exploiting them; Demonstrate compliance with current government and industry regulations such as PCI DSS, NERC, FISMA, SOX, GLBA, and HIPAA; Perform configuration audits with policies defined by FDCC, USGCB, and DISA.. .

N-Stalker

Crunchbase | Website | Twitter | Facebook | Linkedin

N-Stalker® was created in April 2000 by information security technology specialists, aiming at providing solutions to protect corporations and individuals against digital threats that affect information systems. Since then, their research & development laboratory has been working non-stop on security researches, producing web attack detection controls for the past years.

The first product to be released was N-Stealth HTTP Security Scanner Suite, a complete set of tools to assess Web servers security, including the capabilities of identifying vulnerabilities and providing a possible solution to mitigate the risks from critical mission business infrastructure, either on the Internet or in a corporate environment. By permanently making use of attack signature updates, the software has aggregated the most extensive and updated database available on the market, with more than 39,000 vulnerabilities and exploits for Web environments, recursively utilized by the scanning tool.

However, attacks are now business oriented and thus raise a high demand for more effective vulnerability assessment, specially the solution capable of understanding the foundation of a Service-oriented architecture and the ability to manage custom web application business logics and security controls from early phases of development to the daily operations of production-level environments. They understand securing a corporate systems is not about firewall and intrusion prevention mechanisms anymore.

As a result of following-up current market trends (where it is noticed that more and more corporations, governments and tuition institutions are investing in the ubiquity of information systems, as means to integrate technology in people’s daily activities), N-Stalker proposes a new approach on Web Application Security Assessment.. .

Secarma

Crunchbase | Website | Twitter | Facebook | Linkedin

Secarma presents you with an enhanced level of security to defend your critical networks and data, we work diligently with you to eliminate security holes to ensure your digital assets are secure from cyber threat. Our security solutions provide infrastructure assurance, application layer testing and vulnerability assessments.

Your business is safe with Secarma. From its beginnings as an internal division of UKFast, Secarma has grown to become a stand-alone private company setting its own standards in IT security.

Combining security and good karma, Secarma’s ethos is built on assuring safety from the inevitable events in every business’ future: hostile attacks and accidental data losses. We believe that the security of your critical networks and data is key to your organisation’s success.

Whatever your sector, whatever your size, our mission is to help you to seize the competitive advantages of providing your clients with security, compliance, and reliability. We filter your traffic, protect you from DDoS attacks, and ensure that there is no unauthorised access to your network.

We scan for vulnerabilities, detect viruses, and work to prevent a wide range of issues that can negatively impact your business continuity. Should your website be attacked by a hacker, or your servers affected by a natural disaster, we maintain your data’s integrity and provide you with failsafe solutions to protect your business from any eventuality.

In short: your data is always safe with Secarma.. .

KaVaDo

Crunchbase | Website | Twitter | Facebook | Linkedin

KaVaDo, the technology leader in Web Application Protection, delivers comprehensive and adaptable application-layer security protection in real-time. KaVaDo’s effective prevention and assessment technologies complement and extend existing IT security measures not specifically designed to protect Web applications.

InterDo, powered by innovative switching and security technologies, is a proven solution to secure the most advanced and complex Web applications available. ScanDo is a Web application vulnerability assessment scanner that audits the entire Web application environment to uncover both known and unknown vulnerabilities that create security risks..

HealthSec

Crunchbase | Website | Twitter | Facebook | Linkedin

HealthSec provides custom-tailored security solutions for doctor’s offices as well as a digital vulnerability scanner.

Veiliux

Crunchbase | Website | Twitter | Facebook | Linkedin

Veiliux focuses on delivering quality security audits and consulting services to all kinds of online businesses in order to help organizations secure their online businesses and infrastructure. With the advent of 21st century, the introduction of new technologies is faster than ever.

Almost all of these technologies or devices are prone to a vast array of cyber attacks, making them the new battlefront of wars and target of thousands of hacking attempts every day. We as humans are highly dependent on these technologies but we’ve failed to come up a solid framework or standard to protect these critical and very important systems.

Veiliux is providing the following services and products to it’s clients and users: 1. Corphus – a responsible disclosure program and bug bounty platform, harnessing the power of crowd-sourcing.

2. Authion – a multi-factor authentication service provider to ensure you never loose access to your services.

3. Scanifier – a cloud-based vulnerability assessment service and scanner powered with Machine Learning to make your services more than just secure 4.

WiFuSec – a wireless network security app, which runs 7000 tests to ensure you are safe and only connect to secure networks.. .

TrustSign

Crunchbase | Website | Twitter | Facebook | Linkedin

TrustSign provides a platform of security services to websites: digital certificates, ePKI, WAF and vulnerability scan. We exist to minimize security risks to website to improve their life cycle in the Internet.

To provide safer Internet environments that generate better business, we serve as a single, fully integrated platform for providing information products, services, and security solutions for e-commerce, websites and internet environments. With expertise and serving customers all segments and sizes, we guarantee safer environments and recognized seals..

Adventurous Entertainment

Crunchbase | Website | Twitter | Facebook | Linkedin

Adventurous Entertainment LLC is a corporation specialized in Cyber Security.

Secureay

Crunchbase | Website | Twitter | Facebook | Linkedin

Secureay Certification helps your customers feel safe – no matter how large or small your website is. Meaning you’ll get more engagement, and Vulnerability Scanner ensures web application security by securing your website and web applications against hacker attacks.

Secureay Co started its activities with the launch of the secureay.com web portal, which is considered today to be one of the leading security web sites on the Internet. secureay.com has over one million page views a month..

Pentestco

Crunchbase | Website | Twitter | Facebook | Linkedin

Pentestco offers free penetration testing services, these services include a full website security vulnerability scanning and penetration testing report filled with detailed documentation of our findings as part of the testing process which is provided to assist you in mitigating known website security vulnerabilities. Pentestco conducts all of our site security tests to the highest standard and follows the OWASP site penetration testing framework and guidelines.

Our online penetration testing service is a highly useful service to a business that demands the very best in application security reassurance. We provide vulnerability scans for your website to improve your security level.