-
Why scanning?
The Audited by Netcraft service regularly tests your internet infrastructure and supplies you with the information you need to maintain your security and eliminate vulnerabilities. Testing can be carried out as frequently as daily and can be used alongside quarterly PCI ASV processes or to provide a dynamically generated seal which asserts that no serious vulnerabilities were found. This will give your users and customers confidence that you are proactive about security, and assurance that your services are scanned regularly. Find out more about our vulnerability scanning and PCI compliance and the reasons to scan your network.
-
-
In-house tool
All scans are conducted with our own in-house scanning tool which was created and is actively developed and maintained by our staff. This allows us to accommodate our clients' specific needs, helps us quickly react to new technologies and vulnerabilities and gives us the knowledge necessary to provide the best support possible.
-
Flexible process
We can schedule scans according to your needs, with weekly scanning being a popular option. You will be able to rescan any of your hosts on an ad-hoc basis. We provide multiple report types, including interactive HTML reports, print-friendly PDFs, and machine-readable CSV files. The IP address range can also be modified part-way the duration of your contract, making Audited by Netcraft a good option for ensuring new deployments are carried out securely.
-
False positive filtering
Due to the nature of remote scanning, Netcraft cannot definitively confirm the presence or absence of certain types of vulnerability, leading to false positives. All customers can add annotations to vulnerabilities, and PCI and seal customers are able to submit evidence which is thoroughly checked by our security team. Customers can use the display filters to hide vulnerabilities that have already been addressed.
-
-
Scan ranges
We provide several ways of defining your scan range. Our process supports a combination of IP addresses (both IPv4 and IPv6 supported), DNS names and AWS/DigitalOcean API keys, allowing us to update your scan range before every scan, depending on your set-up at the time. If you are unsure about what your range is, please contact us and we can use our other tools such as the Web Server Survey to help you find the relevant parts of your infrastructure.
-
TLS
Thanks to our team’s significant experience with TLS/SSL and the data gathered from our SSL Survey which has been running since 1996, Audited by Netcraft is able to detect and report many security issues and practical misconfigurations concerning your TLS set-up. We have also written our own PoC-based tests for TLS-related vulnerabilities, including more popular ones such as Heartbleed, BEAST and DROWN, allowing us to report them with confidence.
-
Backdoor detection
Audited by Netcraft also checks websites for the existence of backdoors and other indicators of compromise, such as the presence of shopping site skimmers using Netcraft’s own experience in the field. Invisible to even the most vigilant shoppers, skimmers affect large numbers of online shops and use malicious scripts to steal payment card information directly as it is entered by the customer.
-
Costs
The Audited by Netcraft service is priced based on the number of machines that we need to test, and the number of machines visible to the internet. We will confirm the ranges with you, and quote a price on this basis.
Fair Use: Please note that use of the Netcraft site is
subject to our Fair Use and Copyright policies. For more information,
please visit https://www.netcraft.com/terms,
or email [email protected].
Warning! You are using an unsupported browser, which means some features may not work as expected. Netcraft recommends upgrading for a better experience.