July 2023 Summaries

Detectify and Penetration Testing (Pen Testing) are two methodologies aimed at enhancing an organization's cybersecurity, but they differ in scope, objectives, and capabilities. Detectify's automated application security testing (AST) solution offers continuous scanning of cloud environments to identify vulnerabilities and misconfigurations, providing a comprehensive overview of an organization's internet-facing assets. It is particularly beneficial for organizations with rapid development cycles or those undergoing mergers and acquisitions, allowing them to prioritize threats based on critical assets. In contrast, Pen Testing involves skilled experts simulating cyber-attacks to identify vulnerabilities and complex attack vectors, often driven by compliance needs and typically conducted a few times a year. While Pen Testing provides in-depth insights, it may not keep pace with the rapid changes in modern technology stacks, making automated tools and Pen Testing complementary. Automated tools help maintain a broad understanding of external risks and plan Pen Tests effectively, ensuring that security controls are validated and applications are well-hardened.

Implementing an AWS multi-account strategy has offered Detectify increased scalability, flexibility, security, cost management, and visibility in their cloud environment, but it has also presented significant challenges. The transition has led to issues such as cognitive load overload on the Platform team, misalignment among different teams, an overwhelming number of options, and various technical hurdles. The Platform team, which evolved into an Enabling team, had to adapt to new technical challenges and assist Stream-aligned teams in overcoming obstacles. These teams faced difficulties with inconsistent structures and deployment pipelines, which led to delays in application development. Despite these challenges, Detectify has successfully implemented the strategy and is eager for future learning opportunities to refine their approach.

The updated platform discussed in the text enhances the visibility and management of vulnerabilities across an organization's digital attack surface. Users can now view vulnerabilities directly on the Attack Surface page, allowing them to prioritize asset protection more efficiently, while still accessing detailed vulnerability information on a dedicated page. The new Overview feature provides insights into risk factors such as vulnerability severity and breaches of security policies, replacing the old dashboard. Recent updates also allow more granular control over security policies by specifying domains, improving policy enforcement and reducing false alerts. Additionally, the platform has integrated new crowdsourced vulnerabilities, enhancing its security offerings, and users are encouraged to try the platform through a free trial.