E-Commerce

For businesses who concern about the security of their web sites and applications, we offer security assessments in a form of several web penetration test services, and anti-hacking protection through 24x7 monitoring, detection, and prevention of incoming web attacks.

Quick security assessment against your web site, simulating "drive-by" hacking attempt from attackers looking for easy targets. This type of attack usually starts with automated scanning and break-in attempt, followed by quick manual testing on sensitive areas of your application (i.e. login page, admin page, comment areas, etc). Attackers in this scenario typically will lose interest and move on to other sites if they fail to make any progress on yours.

Scope

One web site or application.

Timeframe

2 days.

Cost

FREE — We only accept 3 requests per-month, follow us on social media to receive updates on slots availability.

Deliverables

Softcopy report, detailing results and recommendations.

Contact Us

Focused security assessment against your web application, simulating "targeted" hacking by motivated attackers. This type of attack includes all methods used in "drive-by" attacks, plus exhaustive manual testing against all online accessible entry points in your application. Attackers in this scenario will try to register as legitimate users, perform more in-depth testing and analysis, attempt to defeat any security controls put in-place, and typically spent several days before giving up when failing to make progress.

Scope

One web site or application.

Timeframe

5 days.

Cost

USD 500 per-site

Deliverables

Softcopy report, detailing results and recommendations.

One month email support to assist remediation effort.

Contact Us

Comprehensive security assessment against your critical e-commerce site, simulating determined attackers with real budget and monetary incentives. This type of attack started with extensive background research on your organisation and online infrastructure, and on any publicly available information from and about your employees and typical customers, in order to formulate a coordinated multi-stage attack strategy. As a result, the strategy will not only include a much more comprehensive "targeted" web attack scenarios, but may also include development of custom exploits, phishing email and sites, and social engineering attacks to key personnels in your e-commerce team or service providers.

Scope

One web site or application, and supporting infrastructure

Timeframe

At least 20 days.

Cost

Vary based on the complexity of your environment.

Deliverables

Hardcopy and softcopy report, detailing results and recommendations.

One day on-site technical briefing to discuss remediation strategies.

three month email support to assist remediation effort.

Findings re-test after remediation.

Contact Us

Continuous attack monitoring & prevention service for your web sites and e-commerce applications, backed with security guarantee (terms and conditions apply). This service includes initial security assessment & hardening, deployment of application firewall and intrusion detection system, and 24x7 remote monitoring and alerts from our Security Operation Centre.

Scope

One web site or application.

Timeframe

Non-stop 24x7.

Cost

Vary based on the complexity of your environment.

Deliverables

Monthly security report.

Just-in-time email or phone alerts on issues requiring immediate attention.

Contact Us