June 2022 Summaries

Detectify has been acknowledged in the G2 Summer Report 2022 as a leader in multiple cybersecurity categories, including Website Security, Penetration Testing, and Vulnerability Scanner, due to high user ratings, satisfaction, and market presence. It achieved the top rank in Website Security, notably excelling in the Small Business segment for Automated Scans, Issue Tracking, and Detection Rate. The company is also recognized as a Momentum Leader in Website Security and a High Performer in Dynamic Application Security Testing (DAST). Additionally, Detectify received the "User Love Us" badge, reflecting strong customer satisfaction, and continues to gain recognition for its contributions to helping security teams manage expanding attack surfaces.

A new filter has been introduced to simplify the assessment of attack surfaces by allowing users to filter based on surface state, addressing previous limitations in evaluating Internet-facing assets. Enhancements to Surface Monitoring and Application Scanning now enable both admins and editors to perform all actions related to scans, including scheduling and editing, while users can easily access "severity" and "root asset" filters in the vulnerabilities view. The platform has also incorporated new crowdsourced vulnerabilities of various severity levels, contributed by a community of ethical hackers, to keep users informed about potential security threats. Additionally, the company is expanding its team by hiring for multiple roles, including engineers and product managers.

Surface Monitoring has introduced new features to enhance the visibility and management of an organization's attack surface, including the ability to filter by DNS record type and view comprehensive DNS details of Internet-facing assets. These enhancements allow security teams to gain a complete overview of exposed assets, such as open ports and DNS records, enabling more effective responses to security issues. Users can now drill down into specific assets through a new Details page and access DNS Records to investigate anomalies or risks, such as subdomain takeovers caused by dangling DNS records. The updates aim to streamline the process for security teams by providing detailed information in one place, eliminating the need to verify DNS record types outside of the tool. Additionally, Surface Monitoring offers knowledge base articles to help users understand how ports are monitored and what asset information is enriched, and they are actively hiring for various roles.

Users now have access to a subteams functionality through the Detectify API, aimed at improving the management of security across multiple development teams by enabling the creation and management of subteams. This feature, available to customers on the Enterprise Plan, allows for the association of assets with specific teams, facilitating targeted action on vulnerabilities and risks. It addresses the challenge of overseeing a growing attack surface and the complexities faced by security teams managing numerous development teams. The API allows users to perform operations such as creating, reading, updating, and deleting subteams and asset pattern filters, as well as retrieving all assets and vulnerabilities for a subteam. The endpoint is subject to change based on user feedback, and additional information is available on Detectify's developer site.

Application Scanning has been enhanced to provide users with easier access to their next scheduled scans and scan settings, addressing previous issues of complexity, especially for those with extensive attack surfaces. New tests for high and critical vulnerabilities have been integrated into both Surface Monitoring and Application Scanning to improve vulnerability management. Users can now view all upcoming scans on a single page and are encouraged to schedule recurring scans for the most current insights. Additionally, a range of new vulnerabilities have been crowdsourced from ethical hackers and added to the system, with details available in the "What's New?" section. The platform is expanding its team, inviting engineers, product managers, and sales professionals to join.

Surface Monitoring by Detectify has been awarded the 2022 Fortress Cyber Security Award in the Application Security category by the Business Intelligence Group for its innovative approach to external attack surface management (EASM). This product, which builds upon a previous Detectify security solution, enables security teams to continuously monitor and analyze web vulnerabilities, allowing for effective collaboration with development teams to enhance application security within CI/CD pipelines. Leveraging continuous payload-based scans and insights from a community of ethical hackers, Surface Monitoring has identified over 300 zero-day vulnerabilities in the past two years, providing organizations with rapid detection capabilities and a strategic advantage over malicious attackers. As highlighted by company leaders, the tool empowers businesses to adapt to the constantly changing threat landscape, ensuring robust protection for their digital assets and fostering consumer trust.