NTOSpider - Site Analysis

While the elimination of application vulnerabilities is tantamount to information security, understanding the nature of inherent threat to your site is the only way to proactively develop policy and process aimed at continuously protecting your organization. With this in mind, NTOSpider offers the only Site Analysis report in the application security industry. By analyzing the architecture, resources and attributes, as well as technologies employed on a site, NTOSpider is able to effectively qualify your overall site threat "Exposure." As a completely passive assessment (i.e. no vulnerability checking), this aspect of NTOSpider scanning is totally safe and rich in information to help with site planning and policy development.

Site Analysis reporting is highly graphical, allowing for a quick understanding of site architecture and Exposure. Drill-down information allows for users to quickly see specific details/attributes regarding forms, hidden fields, cookies and authentication, as well as other resource attributes. Analysis of site attributes include:

• Forms
• Authentication
• Cookies
• Parameter/SQL strings
• Hidden Fields
• Applet/Objects
• Scripts
• Email IDs
• Resources behind authentication

Each Resource has a summary and a detail pertaining to its findings, and is cross-linked to other report data including vulnerabilities and attributes.

NTOSpider's proprietary Resource Map provides a one-of-a-kind perspective into site architecture and threat data. By correlating site resources, their attributes and their vulnerabilities, Resource Map allows users to quickly and effectively understand problem spots throughout the web site.

The use of graphical icons to convey information like the use of SSL, Authentication points, authenticated crawling, vulnerabilities, and sub-domain networks enables you to quickly understand your site and interact with the data important to you.