Core Security Adds Web App Pen Testing to Impact

Core Security adds Web application penetration testing capabilities to Core Impact

Dark Reading Staff, Dark Reading

October 16, 2007

1 Min Read

BOSTON -- Core Security Technologies today announced the addition of web application penetration testing capabilities to CORE IMPACT, the most comprehensive product for performing enterprise security assurance testing. With the addition of web application testing to its comprehensive network and end-user security testing capabilities, CORE IMPACT v7.5 now will enable users to safely assess an organization’s security posture against the top three attack methods that jeopardize data today:

  • penetration of network defenses via exploits designed to compromise vulnerabilities in server operating systems and services, as well as client applications that run on desktop systems

  • deception of employees, contractors and other end users via email-based social engineering attacks, such as phishing and spear phishing

  • manipulation of web applications to access backend data via SQL injection and remote file inclusion techniques

“As web application vulnerabilities become more ubiquitous, cybercriminals are increasingly taking advantage of the trust that organizations place in e-commerce, customer self-service, ERP and other web applications,” said Charles Kolodgy, research director, for Secure Content and Threat Management research at IDC. “Attackers don’t segment their vectors, they combine all the weaknesses they can find into a given attack. Organizations must test accordingly and do so following a safe, repeatable and consistent methodology.”

Core Security Technologies

About the Author(s)

Dark Reading Staff

Dark Reading

Dark Reading is a leading cybersecurity media site.

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like


More Insights