Security testing and network scanning for your organisation
Netcraft has an excellent pedigree in security testing and network scanning; We've been providing network security services, including application and penetration testing and automated security scanning since 1994.
Contact Sales
Vulnerability Scanning
Schedule scans of your network that automatically look for vulnerabilities and produce comprehensive reports. These contain recommendations which come from public security advisories and our research gained from testing thousands of networks
Application Testing
Our team will assume the role of a determined hacker looking to exploit weaknesses in your security and gain access to your application or network. We will produce a final written report with proposed solutions along with links to recommendations and advisories
Automated Vulnerability Scanning
As a PCI approved scanning vendor, Netcraft can provide PCI security scans in addition to penetration testing of both web and mobile applications, performed by experienced professionals.
Netcraft’s automated vulnerability scanning service regularly tests your internet infrastructure and supplies you with the information you need to maintain your security and eliminate vulnerabilities.
Regular Scans
Schedule scans of your network as frequently as needed - daily, weekly or monthly. Even on-demand for individual hosts
Seal
Give your customers confidence with our dynamically generated seal which certifies we audited your network
PCI Compliance
As a PCI Authorised Scanning Vendor (ASV) we can help you breeze through the regular scanning requirement of PCI Compliance
Full support
Our experienced security professionals are here to help by email or phone
Growing database
New tests and advisories are added daily from public security advisories and our own research gained from testing thousands of networks
Reports
Descriptive severity grading and categorisation of each exploit's risk is available in a web report. Whilst differential reporting highlights security changes between scans
Exploit it
Safe example exploits are embedded into the reports, where possible, for easy ‘click to test’ self-verification of fixes
Fix it
Clear and concise remediation advice - in the form of a web accessible database of fixes and resources for mitigating discovered vulnerabilities
-
Automated host detection
Netcraft does not need to be informed of every network change.
-
Vulnerabilities
Available network services are tested for the presence of published well-known vulnerabilities
-
Operating system detection
Entirely automated, based on TCP/IP characteristics
-
Non-disruptive
Denial-of-service exploits are reported (based on version numbers and fingerprints) but not executed, and test load is controlled
-
Firewall mapping
Full TCP/UDP scan show services unintentionally exposed by maintenance or configuration errors. Services are identified even when running on non-standard ports
-
Web applications
Web servers are crawled to determine technologies used and then further tests are run to identify misconfigurations, vulnerabilities, and indicators of compromise such as backdoors and shopping site skimmers
More Information
Find out more detail about these products
Application testing
Netcraft’s Web Application Testing service is an internet security audit, performed by experienced security professionals. Manual testing highlights issues in your application that can’t be identified in an automated test. The service is designed to rigorously push the defences of internet networks and applications. It is suitable for commissioning, third party assurance, post-attack analysis, audit and regulatory purposes where independence and quality of service are important requirements. A final written report provides an analysis of any security or service problems discovered together with proposed solutions, links to detailed advisories and recommendations for improving the security of the service under test.
Web
Rigorously push the defences of internet networks and web applications
Mobile
Have your app decompiled and inspected for any leaks of information. Not only is the app itself tested, but also any server it interacts with
Regulatory Processes
Satisfy compliance with various security regulations and requirements, such as PCI DSS v2.0 requirement 11.3
Reports
Receive a final written report with proposed solutions and links to advisories and advice. Understand the probability and severity of vulnerabilities with impact predictions
-
Commissioning
Reduce the likelihood of vulnerabilities being present when the application reaches production
-
Audit
Check that no vulnerabilities have been introduced throughout the application’s life
-
Third party assurance
Satisfy your customers that any risks have been appropriately mitigated
-
Post attack analysis
Discover what went wrong and put steps in place to prevent a recurrence. Gain insight on potential data breaches that were possible and how to respond if they have occured

