TOTAL WEBSITE SECURITY COMPANY OVERVIEW WEBSITE SECURITY INDUSGUARD PRODUCT CUSTOMERS & PARTNERS OUR DIFFERENCE 01
www.indusface.com | Indusface, Confidential and Proprietary
Company Profile BUSINESS
LONG TERM CUSTOMER RELATIONSHIPS
Website and Web Application Security Founded in 2004
400+ customers worldwide, includes Fortune 500
STRONG FINANCIALS Privately owned, profitable company in a high growth business CAGR of more than 84% since inception
7 of the Top 10 Banks 6 of the Top 10 Insurance companies 5 of the Top 10 E-Commerce Sites 5 of the Top 10 Government Organizations 4 of the Top 5 Enterprises
EXPANDING GLOBAL FOOTPRINT Offices in Bangalore , Mumbai, Vadodara, India | Ottawa, Canada 60 Employees EXPERIENCED MANAGEMENT TEAM
02
www.indusface.com | Indusface, Confidential and Proprietary
AWARDS
Complex – is the nature of most websites today Dynamic Sites Basic Shopping Cart
Static Sites Complex Shopping Carts
Social Network
Web 2.0, Ajax Technologies
Mission Critical Sites
Banking Sites
Payment Gateways Corporate Websites Healthcare
03
www.indusface.com | Indusface, Confidential and Proprietary
Website Security Challenges Constant – are the rapid and ongoing application changes Website application content, design and code changes take place frequently and sometimes daily due to competitive pressure, introducing new offerings or promotions or information updates or business requirements.
Control – over frequent change is tough for security teams Business teams take care of website modifications, updates and upgrade requirements and often these changes are not approved through security teams.
Misaligned – are budgets between web application security and perimeter security Budgets allocated to address web application security are minimal compared to spend on network security, despite the fact that 75% of most attacks take place in the application layer. 04
www.indusface.com | Indusface, Confidential and Proprietary
Web Attacks of Today 1.5 million web pages affected by the mass website hack (SQL injection) 15000+ websites were exploited in India in 2011 Web Malware grew by 139% in 2010
Targeted, Sophisticated, Frequent and Profitable – are the web attacks of today 05
www.indusface.com | Indusface, Confidential and Proprietary
75% of attacks take place at the application layer Automation is not always effective without manual configuration or testing activity; manual testing can uncover flaws that are difficult or impossible to find with automated tools
Anatomy of a Website Attack Top Website Vulnerabilities Malicious Code Injected WEB SITE
SQL INJECTION OR XSS
HACKER Visit the Web Site
SQL Injection Cross Site Scripting Information Leakage Content Spoofing Cross Site Request Forgery Brute Force Insufficient Authorization Session Fixation Abuse of Functionality Over 80% of all Websites have serious vulnerabilities
Redirected to Malicious Site
CLIENT Passwords, Sensitive Data 06
www.indusface.com | Indusface, Confidential and Proprietary
Download Malware
Exploit unpatched vulnerabilities
Vulnerability Assessment
07
Application Scanning
www.indusface.com | Indusface, Confidential and Proprietary
Malware Monitoring
IndusGuard Cloud Services
Vulnerability Assessment
Application Scanning
• More than 54,500 checks • Browser-based scanning, across 14,000+ scans the client-side vulnerabilities components of the • Actionable remediation application plan and reporting • Scans Web 2.0 apps – • Detects vulnerabilities analyzes JavaScript, AJAX based on what the system and Flash applications is running deployed on your website • Most accurate results with • Daily Scanning for detailed proof complete coverage • Zero False Positives • Business Logic Testing
Malware Monitoring • Find known and unknown malwares • Multiple Blacklisting detection • Defacement Detection • Anti-Malvertising for ad networks and publishers • Flexible Notification • Real time crawling and real time behavior analysis • Authenticated Scanning • Web Service API
IndusGuard Cloud Offerings
For static or dynamic websites addressing the fundamental basis for daily cloud based automated security
09
For enterprise and e-commerce web applications needing comprehensive management of web security risk and exposures
9 www.indusface.com | Indusface, Confidential and Proprietary
For mission critical websites looking for broad and in-depth security coverage with expert validation and business logic checks
Security Information Centre
WEBSITE SECURITY SERVICES
SUPPORT FOR MULTIPLE URLS
•Comprehensive customizable dashboard • Support for Multiple Websites •Role Based Access Control • Remediation Guidelines • Flexible Reporting and Analytics • Global Web Security Practices & Industry Standards MALWARE MONITORING
010 www.indusface.com | Indusface, Confidential and Proprietary
APPLICATION AUDIT
VULNERABILITY ASSESSMENT
Customers & Partners 400+ customers worldwide, includes Fortune 500 Thousands of Web Application and Malware Scans since 2010
011 www.indusface.com | Indusface, Confidential and Proprietary
Our Difference THE RIGHT PRODUCT Broad and Accurate Coverage of Security Issues In Depth Website Scanning Daily Scanning Flexible and Easy to Manage cloud based software Cost Effective Transformational Technology 012 www.indusface.com | Indusface, Confidential and Proprietary
THE RIGHT COMPANY COMMITTED: Towards delivering the best product and solutions for web application security ATTENTIVE: We continuously fine tune and improve our products & solutions for our customers by attentively listening and proactively addressing their security challenges. EXPERIENCED: Our team consists of seasoned professionals who have a proven track record and versatile experience in security.
Thank You Sales : sales@indusface.com Marketing : marketing@indusface.com Technical : support@indusface.com
VADODARA, INDIA A/2-3, 3rd Floor, Status Plaza Opp Relish Resort Atladara Old Padra Road Vadodara – 390020 Gujarat, India
BANGALORE, INDIA 408, 2nd Floor Regency Enclave 4, Magrath Road Bangalore – 560025 Karnataka, India
MUMBAI, INDIA 1357 / 1359, Regus Serviced Offices, Level 13, Platinum Techno Park 17 & 18, Sector 30, Vashi, Navi Mumbai – 400705 Maharashtra, India.
T: F:
T:
T : +91 22 61214961
+91 265 3933000 +91 265 2355820
F :
+91 80 65608570 +91 80 65608571 +91 80 41129296
OTTAWA, CANADA 137 Goodman Drive Kanata, Ottawa K2W 1C7 Ontario, Canada
HOUSTON, USA 1001 Fannin Street, Ste 1250 Houston, Texas 77002 USA
T : +1 613 721 9363
T : +1 832 295 1462
013 www.indusface.com | Indusface, Confidential and Proprietary