ImmuniWeb Launches Free Website Security and PCI DSS Compliance Test
Summary
Initially designed for SMEs and organizations with nascent application security testing programs, large organizations with mature DevSecOps programs can also benefit from the service to quickly run hundreds of daily scans ensuring essential security and compliance of external web applications. Check over 20 HTTP headers related to security, encryption or privacy for strong configurations in line with industry best practices, including ones from OWASP. Assess Content Security Policy (CSP) to prevent some XSS and CSRF exploitation vectors, as well as variations of ransomware and Cryptojacking attacks. Among almost 40 million public websites tested, only 9.74% contain up2date software, 2.07% satisfy the aforementioned PCI DSS requirements, and only 2.39% are protected with a WAF. Ilia Kolochenko, CEO and Founder or ImmuniWeb, says: “Our free community offering enables our company to maintain sustainable relations with the community, get valuable feedback and actionable data on the global state of application security.