The same defences on every site.
Firewalls, a WAF, DDoS protection, and end-to-end encryption on every site, with testing before launch and monitoring after.
Every request
- Visitor
- CDN
- DDoS protection
- Web application firewall
- Network firewall
- Your site
After launch, across a year
Application scan
Quarterly
Infrastructure scan
Quarterly
Penetration test
Annually
CI/CD security tests
Every deployment
Defacement monitoring
Always on
Protection for as long as your site is live.
Protection in front of every site
Every request passes the CDN, DDoS protection, a web application firewall, and network firewalls before it reaches the site. Traffic is encrypted end to end, and each tenant is isolated.
- DDoS protection
- Web application firewall
- Network firewalls
- End-to-end encryption and isolated tenancy
Tested before launch
Book vulnerability scans and penetration tests in the security portal before go-live. Findings are verified and fixed, and then the site launches.
- Bookings in the security portal
- Application vulnerability scanning
- Application penetration testing
- Static code scanning
Scanned and watched after launch
Application scans run once or every quarter, infrastructure scans every quarter, and penetration tests once or every year. SentryPage watches live pages for defacement, and a security team reviews the alerts.
- Quarterly scans
- Annual penetration tests
- SentryPage defacement monitoring
- Alerts reviewed by a security team
Security in every release
Sites on CI/CD run static and dynamic security tests and software composition analysis on every release, with the findings consolidated in DefectDojo.
- Static testing of source code
- Dynamic testing of the running site
- Third-party dependency analysis
- Findings in one place
Questions
Something else? Ask us directly.
Before launch, tests are booked in the security portal and findings are fixed. After launch, scans and penetration tests repeat on a schedule, and sites on CI/CD are tested on every release.