Web Vulnerability scanner & Remediation

1. Web Vulnerability Detection & Remediation as a Service

2. Introduction GamaSec is a cyber security company that lowers the risk and strengthens the resilience of businesses for cyber-attacks on their websites, including Data Breaches and Denial of Service attacks • GamaSec’s Cyber security solution for detecting and protecting websites, web applications and other vulnerable online information. We provide a combination of online web vulnerability-scanning, daily malware detection & blacklist monitoring for optimal protection of your website . • Built from the ground up on a completely different technology backbone than other solutions in this space, GamaSec goes beyond signature-based tools to detect more “real vulnerabilities.” Additionally, GamaShield is affordable to all businesses and takes pride in providing superior customer service and responsiveness.

3. Everyone’s a Target • GamaSec is a cyber-security company that lowers the risk and strengthens the resilience of businesses for cyber-attacks on their websites, including Data Breaches and Denial of Service attacks.Cyber risks have become the leading threat in a world that relies on online information systems to operate effectively. It is no longer a matter of “if” a system will be breached, but rather "when" and "how bad"… • Almost every organization has some “digital gold” that outsiders may want to exploit. This data may include intellectual property, sensitive personal information about customers and employees, confidential business plans, or financial information. Every organization, regardless of industry, is a target for cyber crime, espionage, and state‐sponsored attacks. • Cyber-attacks are one of the most prominent risk concerns for businesses around the globe. Companies are more prone to danger than ever before, calling for more strategic preventative measures – and the right insurance to protect the company.

4. GamaSec’s combination of technology and know delivers significant innovation and competitive differentiation • Based on IT security Expert Knowhow, GamaSec developed propriety software technologies to rapidly respond to the market needs and provide ease of integration & customize with other cyber security applications. • GamaSec developed artificial intelligence technologies that penetrate deeply with surgical precision within the application layers. • GamaSec uses a sophisticated and proprietary hashing system to minimize false positives. This is done via dynamic false-positive filter rules that run automatically. • GamaSec’sreporting provides ease of use, and deep insights on the vulnerabilities including the cause, location, and recommendation on how to remove reduces the time to eradicate vulnerabilities from websites. • GamaSec will likely become the first to market with an integrated cyber Security Platform and Cyber Insurance offering that reduces the number of successful cyber-attacks against company websites, and reduces the pay out on claims by insurance companies.

5. App Vulnerability Scanner As a Service GamaScan, is a remote online web vulnerability-assessment service delivered via SaaS (software-as-a-service) and is designed to identify security weaknesses in web applications. The GamaSec Application Vulnerability Scanner identifies application vulnerabilities ( e.g. Cross Site Scripting (XSS), SQL injection, Code Inclusion etc.. ) as well as site exposure risks. It also ranks threat priority, produces highly graphical, intuitive HTML reports, and indicates site security posture by vulnerabilities and threat exposure. The combination of application vulnerability scan & daily malware detection helping in the protection of your website against suspicious files injection & Daily Blacklist Monitoring checking on the status of your website on the Google Safe Browsing List and other search engines & a remote online web vulnerability-scanner designed to identify security weaknesses in web applications give your website with an optimal protection cover. First, the scanner explores the entire Web application environment and registers its structure and contents. Then it mimics actual hacking methods to identify and uncover the details of any point that is susceptible to attack including: • SQL Injection Attack - Attempt to get the database server to execute arbitrary SQL. • Cross Site Scripting Attack - Attempt to coerce the program to outputting third party javascript. • Parameter Manipulation Attack - Attempt to manipulate input to application validation and filtering. • Code Injection Attack - Attempt to execute arbitrary code. • Hidden Tag Issues - If forms are used sensitive information, such as price, should never be hard coded into the form using hidden tags.

6. App Vulnerability Scanner As a Service Application Vulnerability attacks cover by GamaScan SQL Injection Xpath Injection LDAP Injection Blind SQL injection CRLF injection Cookie manipulation Installation Path Disclosure Directory Traversal Source Code Disclosure .Net exception Script language Error Cross-Site Scripting Command Execution URL Redirection Cross-Frame Scripting PHP Code Injection Remote File Inclusion General Tests cover by GamaScan Web Servers Directory Enumeration Directory Permissions Web Server Technologies Directory Indexing Sensitive/Common Files HTTP Methods Directory Access Third Party Application Backup Files

7. Malware Detection As a Service In order to improve existing identification capabilities we have developed a heuristic non-signature based detection infrastructure which is capable to detect and protect from various kinds of web-threats. GamaSec malicious content detection engine comprises of multiple non-signatures based investigation and analysis methods. GamaSec engine identifies JavaScript based attacks and security vulnerability exploits. On top of that, GamaSec engine detects encoded shell-codes, JavaScript obfuscation techniques and JavaScript packers which are used to hide malicious content and dangerous code from signature and pattern based identification mechanisms GamaSec investigation infrastructure embeds several execution emulators which are not only emulating execution of the targeted device but also penetrate the investigated content and detect web-treats regardless of the kind of the targeted web browser or operating system or Internet device.

8. Remediation As a Service GamaSec’s cyber security expert’s team prioritize risks and fix vulnerabilities resulting of the GamaScan, GamaWare, GamaShield reports findings, and eradiate web application vulnerability and malware. GamaSec’sSecuirty experts are all practicing developers who track the latest software trends and methodology and have the expertise to fix vulnerabilities By using GamaSec Cyber security expertise, you can concentrate your effort on your business activities while remediation takes place. The remediation process has been continuously upgrading in GamaSec as application vulnerability and malware evolves on a daily basis. The process is manual as well as automated. During the remediation process we use engines and tools that are developed and built in house. Please note that every remediation is handled by a Security analyst whose responsibility is to clean-up all the malicious content from an infected website and make sure there are no malicious leftovers. GamaSec have specialized remediation expertise to shorten the Vulnerabilities and Malwares eradication process and ensure through verification that the vulnerabilities have been eliminated thus reducing the risk from the infected website. 

9. CONTACT US TO SECURE YOUR WEBSITE NOW GamaSec, US 120 Carolyn Blv Farmingdale 11735 NY US Toll Free 1-877-556-6705 GamaSec, Ltd 22 Maskit St Herzelia Pituach 46733 Israel Tel + 972 584541718 • Technical Support: support@gamasec.com • Sales: sales@gamasec.com • Billing & Information: info@gamasec.com VISIT NOW: WWW.GAMASEC.COM Visit us now to get Free Trail and test our Services of Online Website security @ https://www.gamasec.com/ Thanks