Web Application Security

Protect the servers that are most exposed to the Internet - your Web servers

Web application vulnerabilities remain the number one source of attacks on enterprise users, but many Web application security solutions lack the sophistication to comprehensively and accurately assess the risk level associated with vulnerabilities in Web applications. Building upon its industry-leading Web application scanning capabilities, Rapid7 integrates known exploits from Metasploit with vulnerability information from Nexpose to help defenders effectively prioritize the greatest risks to address first.

At Rapid7 we think like attackers when it comes to Web application security. We are committed to continually enhancing our solutions faster than the market (see chart below). Web application solutions from Rapid7:

• Scans Web 2.0 applications - Nexpose uses its enhanced web spidering and analysis capabilities to analyze JavaScript, AJAX and Adobe Flash applications in testing, quality assurance, deployment and ongoing management. Metasploit enables you to scan and exploit both standard and custom Web applications.
• Secures the complete Web application - Nexpose identifies vulnerabilities throughout the entire application, scanning the browser and server-side components such as databases, shopping carts and other third party applications for exposures that other Web application scanners do not find.
• Detect more vulnerabilities and provide deeper insight into risk - By utilizing vulnerability chaining, Nexpose understands how one vulnerability can lead to another, to detect and provide remediation guidance for vulnerabilities that lie deep under the surface that other scanners miss. Additionally, Metasploit can also leverage advanced pivoting once an application has been penetrated to route attacks through compromised machines, so you understand how far down a breach can expose you.
• Offers a unified approach to discover vulnerabilities - The results of a web scan can actually yield vulnerabilities that create exposures on other systems, like within the network or database. Metasploit can use the results from a Nexpose web scan to penetrate the database thus finding vulnerabilities that would otherwise be left hidden.

Commitment to Continual Development and market leadership