Solved

Black Box penetration testing software

Posted on 2014-04-24
7
429 Views
Last Modified: 2014-04-24
I need a good penetration testing software for our web servers. Preferably one that is inexpensive.  Most I have been able to find are nearly $10,000 or more. That cost would be prohibitive.
0
Comment
Question by:jimmylew52
  • 2
  • 2
  • 2
  • +1
7 Comments
 
LVL 34

Expert Comment

by:Dan Craciun
ID: 40020561
It's usually cheaper to hire a company specialized in security testing/audit.

HTH,
Dan
0
 
LVL 1

Author Comment

by:jimmylew52
ID: 40020594
Any suggestions on a company? The ones I have talked to want  $10,000 plus to perform a scan and want to set up to repetitively scan. We need quarterly scans and third party is not required.
0
 
LVL 5

Accepted Solution

by:
Pasha Kravtsov earned 334 total points
ID: 40020650
Have you tried metasploit or acunitex? I don't think they're that expensive.
0
Three Reasons Why Backup is Strategic

Backup is strategic to your business because your data is strategic to your business. Without backup, your business will fail. This white paper explains why it is vital for you to design and immediately execute a backup strategy to protect 100 percent of your data.

 
LVL 33

Assisted Solution

by:Dave Howe
Dave Howe earned 166 total points
ID: 40020679
The problem isn't the software. 99% of website pentesting software out there is free or at least has a free trial version.

The problem is gaining the skills to use it - if you want software you can just point at a site and get the same class of answer you would get from an experienced pentester, you are in for a very long wait; even the best and most expensive software needs to be configured to perform the appropriate fuzzing and SQLi attacks.
0
 
LVL 5

Assisted Solution

by:Pasha Kravtsov
Pasha Kravtsov earned 334 total points
ID: 40020689
I agree with Dave, if you want a truly accurate pentest on your website/network you're going to want to hire a firm that specializes in it. Some tools and automation can miss things only an experienced tester can see.
0
 
LVL 33

Expert Comment

by:Dave Howe
ID: 40020718
Or if you are on a budget but have the time - learn those skills. Everything you need is on the internet for free, you just have to be willing to put in the hours to learn it.
0
 
LVL 1

Author Closing Comment

by:jimmylew52
ID: 40021041
Thanks, it looks like acunetix is going to be the solution for us.
0

Featured Post

Courses: Start Training Online With Pros, Today

Brush up on the basics or master the advanced techniques required to earn essential industry certifications, with Courses. Enroll in a course and start learning today. Training topics range from Android App Dev to the Xen Virtualization Platform.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

How do we balance the user experience (UX) with reasonable security measures? It can be done, if you keep these fundamentals in mind.
Data breaches are on the rise, and companies are preparing by boosting their cybersecurity budgets. According to the Cybersecurity Market Report (http://www.cybersecurityventures.com/cybersecurity-market-report), worldwide spending on cybersecurity …
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question