Step 1 - port discovery scan

We first perform a thorough, interactive port scan of the target. Accurately determining the responding ports on an IP address is the crucial first step to a comprehensive security audit. TrustMe.net's network discovery technology is designed to accurately map out any size or complexity of network topology.

Step 2 - network services vulnerability scan

We then thoroughly interrogate each service running on every available port to determine exactly what software is running and the configuration. Once this information is acquired we run a comparison to our SAFE SITE vulnerability database in order to launch additional application specific and generic tests of each available service. These tests are based on our extensive knowledge base of over 20,000 vulnerabilities that are updated daily.

Step 3 - web application scan

Web application testing is the third phase of TrustMe.net's daily security audit, and perhaps the most important. Traditional security mechanisms such as firewalls and IDS' provide little protection against attacks on your web applications. During this testing phase, HTTP services and virtual domains are checked for the existence of potentially dangerous modules, configurations settings, CGIs and other scripts. Both generic and software specific tests are performed in order to uncover vulnerabilities.

We can run any of these test independent of each to reduce stress on your servers.

Step 4 - alerting

After each scheduled daily or manual audit you receive alerts whenever a vulnerability has been discovered. You also receive immediate alerts when any new vulnerability added to our knowledge base targets a specific device in your account. This significantly reduces exposure time between daily audits.

Step 5 - analysis and remediation

After each phase in complete, we provided detailed reports along with the analysis and problem resolution for each. Our security staff is available to discuss any vulnerabilities that we disover.

Step 6 - SAFE SITE certification

TrustMe.net's SAFE SITE security auditing technology allows the SAFE SITE mark to appear only when a web site's current security status meets the highest published government standards. A maximum of 72 hours is allowed to patch vulnerabilities before the certification mark is replaced by a single-dot "clear" gif image. The SAFE SITE mark will reappear as soon as a new audit is passed.