• Blog
• Site Map
• Contact Us

• Home
• About
• Web Assessment
• Network Assessment
• F.A.Q.

FREQUENTLY ASKED QUESTIONS about MySecurityScanner

Q. How do I sign up for MSS?

A. Signing up for MSS is simple. Visit the registration page on the portal site and register for an account. After you register, a Secure Ideas staff member will contact you to validate your information. This validation is designed to protect both your systems and Secure Ideas. Once your account is validated, Secure Ideas will work with you to determine which service fits your organization's needs best.

Q. How does payment for MSS work?

A. MySecurityScanner offers subscription based services. Secure Ideas offers two ways to pay, credit card and invoice. After your account is activated Secure Ideas will set up either a credit card subscription or will invoice the organization directly.

Q. What is a Web Vulnerability Assessment?

A. A Web Vulnerability Assessment is the process of identifying, quantifying, and ranking vulnerabilities in your website. This assessment is done without the exploitation of the vulnerabilities to lessen the risk to your production systems.

Q. What is a Network Vulnerability Assessment?

A. A Network Vulnerability Assessment is a scan of your network infrastructure and systems to detect potential flaws and problems. This is performed to provide an understanding of your security posture.

Q. Why do I need a Web/Network Vulnerability Assessment?

A. Each day there are more and more data breaches occurring. Each company needs to do "due diligence" making sure their website or network is not vulnerable to attacks by malicious attackers due to incorrectly configured systems or poor programming. Many organizations are required to perform these types of checks due to regulations or contractual agreements such as PCI DSS.

Q. What is the difference between a Web/Network Vulnerability Assessment and a Penetration Test?

A. A vulnerability assessment does not perform an exploitation of the vulnerabilities found in the assessment. A penetration test does. This difference allows a penetration test to truely evaluate the vulnerability while a vulnerability assessment provides a lower risk assessment. Most organizations can benefit from both.

Q. Does this mean you are going to have a hacker hack my website?

A. The service is performed by professional security personnel, which some call ethical hackers but all of our testers have been subjected to criminal background checks. Furthermore all testing is done with permission of the target organization after validation that the person requesting the testing has the authority to ask.

Q. My site uses HTTPS, why do I need a Vulnerability Assessment?

A. Just because your site uses HTTPS to encrypt traffic, you still need a vulnerability assessment. HTTPS only protects the traffic between the site and its visitors. If the site is vulnerable to attack due to errors in its programming or otherwise, a vulnerability assessment is designed to detect it.

Q. We are a small company with a website, do we need your service and is it affordable?

A. Yes, this service is designed for your company. Secure Ideas has built MySecurityScanner to fill the gap that many organizations find themselves. They are connected to the Internet and running various web applications but either can't afford a penetration test or they update their systems more often then they can have such testing done.

Please contact us at info@secureideas.net to discuss how Secure Ideas can assist your organization.