Unlike web application firewalls, Invicti Web Vulnerability Scanner focuses on fixing web security problems, whether than preventing them from happening. Invicti WVS helps in detecting cross site scripting, sql injections and other web vulnerabilities before the web application is exposed on the internet, during its development cycle.
When implementing a web application firewall, only PCI DSS 6.6 requirement is met, while with Invicti WVS the following PCI DSS requirements are met:
2.2.2: Disabled all unnecessary and insecure services and protocols
2.2.3: Configure system security parameters
2.2.4: Remove all unnecessary functionality
2.3: Encrypt all non-console administrative access
4: Encrypt transmission of cardholder data across open, public networks
4.1: Use strong Cryptography and security protocols
6: Develop and maintain secure systems and applications
6.1: Ensure that all system components and software have the latest vendor-supplied security patches installed
6.5: Develop all web applications based on secure coding guidelines
6.6: Ensure that all web-facing applications are protected against known attacks
Watch the video below, and see what advantages there are when Invicti Web Vulnerability Scanner is used to secure, and audit web applications to meet PCI DSS requirements.
https://www.youtube.com/watch?v=EO5T0HWeDJg&hl=&fmt=22
Get the latest content on web security
in your inbox each week.
THE AUTHOR
Comments are closed.