Hailstorm Core and Hailstorm Starter
Application Testing with Some Basic Core Attacks to get Started with Application Security.
Understand major security flaws. Increase productivity.
For getting started by assessing a particular application, Cenzic Hailtorm Starter or Core can go beyond standard, first-generation, signature based detection to find critical security risks like cross-site scripting flaws. With these simplified application security products based on the technological strength of the all of Cenzic Hailstorm® solution, you can test commercial and custom web applications against best practice security policies or for the most commonly known vulnerabilities. In doing so you can your reduce your vulnerability risk and improve your overall web application security. Though Hailstorm Core and Starter only have 1 to 5 key attacks, they are great solutions to get your application security started.
Key Benefits
- Identify major security flaws present in target applications
- Help with internal compliance policies
- Avoid application vulnerabilities that lead to downtime, data theft and financial loss
- Assess applications for commonly known vulnerabilities, using Cenzic’s SmartAttack Library
Core & Starter Features:
Hailstorm Core - $1500 |
Hailstorm Starter - Free |
|
|
| Ability to assess sites up to 150 pages |
Ability to assess sites up to 50 pages |
Probe for five common vulnerabilities:
SQL Disclosure, SQL Error, Cross-Site Scripting, Web server version and Buffer Overflow |
Probe for 1 common vulnerability: Cross-Site Scripting using SmartAttack Library |
| Consolidated Assessment report output |
Consolidated Assessment report output |
| Easy to upgrade to Hailstorm Professional or ARC |
Easy to upgrade to Hailstorm Professional or ARC |
| Download Core with 5 key Attacks |
Download Starter with 1 key Attack |
|
|
|
|
While other vendors technically perform signature-based scanning by analyzing how applications respond to scanning by looking at HTML responses at the packet level, Cenzic executes the attack — while trapping and interpreting events to the response — at the application level.
