What is Security Guardian Web security seal?
How can I contract Security Guardian Web Security Certification?
How does Security Guardian Web Security Certification work?
What kind of attacks does Security Guardian perform?
Does Security Guardian provide support and services to resolve detected vulnerabilities?
Does Security Guardian imply any risks for the tested website?
What is the difference between vulnerability verification and exploitation?
How can I check if a site is being tested by Security Guardian?
What is the Security Guardian Web security seal?
Security Guardian is a website security certification which works over intrusion testing.
How can I increase the sales?
In order to increase the sales you can use the Security Guard Website security certification as it Improves the security perception of the website visitors and potential customers producing an increased sales as more visitors will trust in your shop and buy. Verify it by the ROI claculator
How can I contract Security Guardian Web Security Certification?
Contracting Security Guardian is easy: Simply contact us via our contact form, register form, call us at +34 - 93 176 93 33 or send us an e-mail to [email protected].
How does Security Guardian Web Security Certification work?
Security Guardian Web Security Certification performs daily intrusion tests on websites or online services. If the test results don't show any critical vulnerability, the website or service will be certified and the Security Guardian's Security Seal will be shown.
What kind of attacks does Security Guardian perform?
Security Guardian performs an uncountable number of different attacks to verify that a website or online service is secure. Attacks include SQL Injection, Cross Site Scripting (XSS), HTTP Smuggling, HTTP Splitting, Buffer Overflow, Format String, HTTP Methods, Server Side Including (SSI), CGIs, Transversal Path and Directory Listing.
Does Security Guardian provide support and services to resolve detected vulnerabilities?
Yes, the Security Guardian user console provides a detailed description of the detected vulnerabilities. Additionally we offer our customers services provided by our security experts as for example manual intrusion tests, forensic or ISO27001 audits and more. Feel free to contact us for more information.
Does Security Guardian imply any risks for the tested website?
No, Security Guardian Web Security Certification does not imply any risk. The intrusion tests performed by Security Guardian are not of malicious nature. By default, Denials of Services (DoS) attacks are not performed, but can be contracted as additional service. Feel free to contact us for more information.
What is the difference between vulnerability verification and exploitation?
The so-called vulnerability verification phase is used by attackers to detect if the targeted website is vulnerable. In this phase attackers normally don't use malicious patterns. The so-called vulnerability exploitation phase is the following phase in which attackers try to benefit and take advantage of privileges escalation, information leakage, broken authentication, etc. In this phase attackers typically use uses malicious patterns in order to exploit the vulnerability. A summary about intrusion test phases can be found in Antonio San Martino's speech on the ExpoQa 2008 "Black Box Intrusion Test Phases", awarded as best speech at ExpoQa www.expoqa.com
How can I check if a site is scanned by Security Guardian?
You can check if a site is scanned by Security Guardian by clicking on the Certification Seal displayed in the site. If this seal doesn't point to www.security-guardian.com or if there isn't a link, you can use the checking tool you can find here: Security Guardian Domain Checker
