Sucuri

Sucuri, Inc

Type	Private
Founded	2010
Headquarters	USA
Key people	Daniel B. Cid and Tony Perez
Slogan	Real People. Real Security

For the snake, see Anaconda.

Sucuri is a globally distributed security company, focused on detecting and remediating compromised websites. Their technology is heavily used as an early warning system to detect malware, spam and other indicators of compromise on websites and DNS hijacking.

Sucuri offers a Website Antivirus and Firewall (WAF) (CloudProxy), to protect sites from web attacks and DDoS.

Components

Sucuri consists of a main application that tracks all the domains and sites being monitored and a set of tests to be done. Everything is executed in the cloud and a web interface is available to manage all the information.

Web-based Integrity monitoring - Alert on changes to web sites
Web-based Malware detection - Crawler and detects malware on web sites
Whois monitoring - Tracks your Whois records for changes
DNS Monitoring - Tracks your DNS (IP addresses, domains for changes)
Web interface - Management interface to manage it all.
Malware Removal - Exploit remediation and server hardening
Website Firewall - Protection for websites against common threats and DDoS attacks

Publicizing mass infections

Sucuri became famous when they started to publicize the tools used on mass attacks against sites hosted at GoDaddy. GoDaddy criticized them for sharing too much information and possibly helping the attacks. In their defense, it was stated that everything they posted was already known by the black hat community, and it only helped the users to understand and better protect themselves.

Sucuri uses the principle of responsible disclosure to raise awareness about software vulnerabilities on their website security blog.

References

External links

This article is issued from Wikipedia - version of the Sunday, May 01, 2016. The text is available under the Creative Commons Attribution/Share Alike but additional terms may apply for the media files.