Overview
The Vulnerability Scan Service (VSS) conducts automated assessments of your network assets to identify potential risks. It allows for scheduled security scans, continuous monitoring for risk alerts, and detects vulnerabilities related to availability, security, and compliance. Additionally, it provides expert recommendations for enhancing security measures.
Benefits
Comprehensive Vulnerability Scan
The Vulnerability Scan Service boasts a comprehensive library of vulnerability rules encompassing the primary 10 web vulnerabilities outlined by OWASP, including SQL injection, cross-site scripting (XSS) attacks, cross-site request forgery (CSRF), and weak password issues. It is also adept at efficiently identifying vulnerabilities, whether they are newly discovered (0-day), known (1-day), or have been around for some time (N-day).
Overall Asset Support
The Vulnerability Scan Service is capable of scanning a wide range of network assets, including servers, websites, and IoT devices, and pinpointing potential risks using an extensive library of fingerprints. This ensures you stay fully informed about shadow assets and any changes to your assets.
Threat Intelligence Linkage
Utilizing extensive threat intelligence gathered over a span of two decades, the Vulnerability Scan Service has the capability to identify vulnerabilities, whether they are newly discovered (0-day), known (1-day), or have been existing for a while (N-day). Its team of security professionals stays updated on the latest trends in network risks to offer threat intelligence and recommendations for mitigation.
Smart Risk Alarming
The Vulnerability Scan Service promptly activates real-time alerts through multiple channels, accompanied by expert recommendations for managing any identified risks associated with network assets. This ensures you remain well-informed and can promptly address any issues that arise.
Features
Automatic Asset Discovery
The Vulnerability Scan Service effectively recognizes device operating systems, ports, services, and components, enhancing your ability to uncover unidentified assets and effectively oversee and regulate existing ones.
Web Vulnerability Detection
The Vulnerability Scan Service safeguards websites against numerous prevalent vulnerabilities, including SQL injection, command injection, code injection, file inclusion, cross-site scripting (XSS) attacks, and cross-site request forgery (CSRF) attacks.
0/1/N-Day Vulnerability Detection
The Vulnerability Scan Service platform comes equipped with a vast array of harmless proof of concepts (POCs) meticulously tested and scrutinized by security engineers. These POCs are designed to confirm various types of vulnerabilities, including those in web applications, web integration layers, databases, operating systems, and software services.
Weak Password Detection
The Vulnerability Scan Service conducts scans on numerous asset components to identify weak passwords, encompassing FTP, SSH, RDP, MySQL, Oracle, IMAP, Memcached, and Redis, among others.
Risk Evaluation Report
The Vulnerability Scan Service has the capability to produce detailed multidimensional risk assessment reports derived from scan findings. These reports encompass vulnerability detection, and content risks, and provide expert recommendations for remediation.
Scenarios
Website Risk Scan
Server Risk Scan
Mini Program Risk Scan
API Security
IoT Security
The Vulnerability Scan Service conducts thorough scans of your websites to safeguard them against web vulnerabilities, newly discovered (0-day), known (1-day), and long-standing (N-day) vulnerabilities, availability risks, and weak password vulnerabilities.
The Vulnerability Scan Service is capable of organizing your servers both on and off the cloud, conducting vulnerability scans to identify potential risks, service availability concerns, and port vulnerabilities. This aids in the detection of shadow assets and ports. The findings of these scans will be presented in detailed asset analysis and vulnerability reports, accompanied by expert recommendations for remediation.
The Vulnerability Scan Service safeguards the core logic of your WeChat mini-programs against cracking and misuse by automatically detecting web services, APIs, and content, and by hardening virtual machines through JavaScript source code obfuscation.
The Vulnerability Scan Service assesses APIs for web-layer vulnerabilities, configuration adherence, data exposure risks, and feature availability. This supports the development of proactive security frameworks in accordance with industry standards like OpenAPI, alongside a cohesive API security strategy.
The Vulnerability Scan Service offers a diverse range of fingerprints and proof of concepts (PoCs) for discovering IoT devices, detecting vulnerabilities, and conducting firmware security scans. Additionally, it provides sophisticated code obfuscation and instruction-level binary obfuscation techniques tailored to various platforms such as ARM.
Compute
Edge Computing
Container
Distributed Cloud
Microservice
Serverless
Essential Storage Service
Data Migration
Data Process and Analysis
Relational Database
NoSQL Database
Enterprise Distributed DBMS
Database SaaS Tool
Networking
CDN and Edge platform
Network Security
Data Security
Application Security
Endpoint Security
Business Security
Security Services
Security Management
Domains & Websites
Office Collaboration
Enterprise Applications
Data Analysis
Image Recognition
Face Recognition
Voice Technology
AI Platform Service
Natural Language Processing
Optical Character Recognition
Internet of Things
Message Queue
Middleware
Communication
Interactive Video Services
Stream Services
Media On-Demand
Media Process Services
Media SDK
Cloud Real-time Rendering
Game Services
Game Video Service
Education Services
Blockchain Service
Building Services
Cloud Resource Management
Management and Audit Tools
Developer Tools
Monitor and Operation
Education