the first all-in-one cloud security suite platform · os®, linux® and many third-party...
TRANSCRIPT
3
The first Cloud Suite Security PlatformThe right way to manage the Security Risk, both for web and mobile applications
as well as the overall technological infrastructure
All-in-one SaaS that offers to its users:
Flexibility
Cost cutting
Scalability
Accessibility
Background to audit
Compliance to regulations and OWASP best practises
Web Application Scan
Network Scan
Code Review
Three main products:
SWASCAN at a Glance
4
The power and efficiency of Cloud technology is enhanced by a unique platform with a SaaS model, through different integrated and advanced tools.
SWASCAN key products aim to test and verify the weaknesses of third-parties applications, preventing data-loss, and analyze the quality standards of company’s network security, its compliance, internal policies and procedures, overall quality and the security of source code.
SWASCAN also offers other features that complete the Suite and make it an ideal solution for the full risk management activity.
SWASCAN Core Business
Scale
Global Scalability and Manageability
Discover
Automated, Dynamic Deep Scanning
Prioritize
Identify the highest business risks, and take action
Assess
Scan applications everywhere
5
To provide automated security testing and security scan of web applications to identify vulnerabilities
To verify the weaknesses of third-parties applications that could generate loss of data or undesired accesses to private data
To verify and guarantee the compliance to OWASP best practises and current regulations, identifying security issues of the applications
To customize the lenght of the service (monthly, per year) and the number of targets to be analyzed
Swascan Web APP SCAN basically allows:
Provides a Web Application Scan.Identifies more than 200 different web application security flaws and vulnerabilities, including SQL injection,Cross-Site Scripting and manyothers.
Automatic generation of reports giving you a complete anddetailed overview of yournetwork inventory, status, andsecurity risks.
Failure to comply with strictregulations can be costly forcompanies.Swascan is an essential tool to help ensuring you to meet mandatorystandards and avoid penalties.
SWASCAN Suite description: WEB APP SCAN
VULNERABILITY SCANNING COMPLIANCE AUDIT FRAMEWORK
7
SWASCAN Suite description: Network SCAN
To Analyse the security level of company networks
To Verify the compliance to current regulations
To Check the company policies and internal procedures framework
To Offer a security service customizable by number of targets
Network Scan aims to Scan networks and devices and suggests you how they can be fixed.
Successfully meet compliance regulations
Perform full vulnerability and port scanning
Manage organization-wide software deployment
Solve bring your own device (BYOD) headaches
Provide IT reports to your managers
Automatically scan for and deploymissing security and non-securitypatches issued by Windows®, MacOS®, Linux® and many third-partyapplications.
Generate reports of devices, computers, softwareand applications installed in your network automatically, giving you a complete anddetailed overview of your network inventory, status, and security risks.
NETWORK VULNERABILITY SCANNING NETWORK AUDITING PATCH MANAGEMENT
9
Code Review has been created to provide a source code analysis to identify and resolve security weaknesses and vulnerabilities
To Test the vulnerability of source codes
To Assess leaks and inefficiencies of source codes
To Highlight the areas to intervene on
SWASCAN Suite description: Code Review
Easy to use
Scans uncompiled code
Highly accurate On-Premise & On-Demand
Security code review is the process of auditing the source code for an application to verify that the proper security controls are in place, that theywork as intended and that they have been invoked in all the right places.Code review is a way of ensuring that the application has been developed to be “self-defended” in its given environment.
CODE REVIEW CODING LANGUAGES & FRAMEWORKS AUDITING AND COMPLIANCE
11
A reporting tool that makes easier the risk management activity
(e.g. audit)
A recovery tool that suggests how to
re-arrange the different security levels
SWASCAN Suite description: other Services
The Suite has been enriched of other ancillary tools, that complete the platform:
13
BATTLE CARDCLOUD
TECHNOLOGYWEBSCAN
VPNSCAN
NETWORK SCAN
CODEREVIEW
ANNUALLICENSE
(NOT PERPETUAL)
OK OK
OK OK
OK
OK OKOK
OK OKOK OK
OK NO
NO NO
NONO NO
NONO NO
NO NO
NONO
NO NONO
NO NO
OK OK
OK OKOK
OK
OK
OK OKOKOK
15
SWASCAN Team
The right mix to achieve extraordinary results:
Software development and updates
Business development
Monitoring of innovation related to the Security field
an established software developer
(Business Competence)
a “digital” Venture Incubator
(Key Capital)
a Security Expert
(Raoul Chiesa)
Business development
Administration and legal issues
Corporate strategy
Business development
Networking
Strong expertise on cybersecurity, hacking, cybercrime
Member of several Security agencies, associations, European groups, domestic and International governments task forces