漏洞扫描服务

CDNetworks’ vulnerability scanning service is a cloud-based vulnerability solution that discovers cyber security weaknesses in host systems and web-based applications to safeguard against attacks and avoid costly data breaches. Using comprehensive security vulnerability scans, CDNetworks’ vulnerability scanning service generates reports detailing the state of application, host, and web security, along with recommendations to remedy known security vulnerabilities. Then CDNetworks would double check the security status of system after customers fixed the vulnerabilities following the recommendation.  

Because Network security is dynamic and evolving, and in the process of building and maintaining a security system, vulnerability scanning service can discover various security risks and vulnerability in systems so that you can fix them timely before hackers and illegal person, thereby protecting your assets.

1. Before the new launch of business systems, detecting security hazards to ensure the safe and stable operation of business systems.
2. Regular network security self-test and assessment to eliminate security hazards.
3. Security assessment and effectiveness inspection during network construction or transformation.
4. Security tests before major events/tasks.

1. 多维扫描
   针对各类企业资产的专业漏洞扫描，包括但不限于web应用程序、主机和中间件。
2. 丰富的漏洞数据库
   CDNetworks拥有一个基于国际CVE标准的全面漏洞数据库，其中包含2000多个漏洞信息并且会实时更新。
3. 高精度
   所有扫描结果都会由CDNetworks安全专业人员进行人工验证，以确保最高程度的准确性。
4. 专业指导
   CDNetworks安全团队致力于帮助企业在被网络攻击者发现和遭受攻击之前，及时发现并修复安全漏洞。

1. Server host scanning items
   Port scanning, weak password detection, DNS domain transport vulnerabilities, server fingerprinting, windows SMB remote code execution vulnerabilities, various buffer overflow vulnerabilities, 3389 remote overflow, etc.;
2. Web service scanning items
   OWASP Top 10 vulnerability scanning (SQL injection, XSS, etc.), various CVE vulnerabilities (buffer overflow, remote command execution), file inclusion vulnerabilities, URL jumping vulnerabilities, directory traversal vulnerabilities, web backend probes, web application fingerprinting, etc.
3. Middleware detection
   phpmyadmin, tomcat, web logic, etc. weak passwords; MySQL, Oracle, DB2, etc. weak passwords; struts 2 command execution vulnerabilities, web logic deserialization vulnerabilities, various known CVE vulnerabilities, middleware configuration errors, etc.

1. Domain name (sub-domain) and IP range you need to scan.
2. Specific scanning time, thread pressure, etc.
3. Business environment situation, for example, is it accessible to the external network? Is there a security device?