Introducing Dynamic API Scanning
Application environments are more complex than ever, with APIs forming the critical connective tissue. But this proliferation has created a vast, often invisible, attack surface. …
Last year Detectify announced that we were AWS Technology Partners which meant that getting started with Detectify was made easier. This year we are thrilled to announce the release of a connector between AWS Route 53 to Detectify.
Detectify is a SaaS-based web application and domain security startup. We collaborate with 150+ handpicked white hat hackers and currently offer 1500+ security tests from OWASP Top 10 vulnerabilities, subdomain takeovers to S3 buckets misconfigurations and more.
By activating this connector, Detectify will be able to pull DNS records data from your AWS Route 53 into your Detectify account. This means domains, subdomains, anything made available in the sharing key. Since the information on Route 53 is constantly changing, this will also sync automatically with what’s shown on your Detectify dashboards to ensure your monitoring is up-to-date.
The cloud landscape has enabled companies to scale up development and business quickly. This also means that it’s not enough to secure your main applications. Together with this expansion, more digital assets are created and hosted in the cloud making it a challenge for IT security teams to ensure anything connected is also secured including temporary applications.
Some of you are probably familiar with the Hostile Subdomain Takeover discovered by Detectify’s Security Advisor, Frans Rosén. In this method, he was able to takeover subdomains that pointed to Heroku, Github, Squarespace and more, using a practically non-traceable attack vector due to DNS misconfigurations. With this research we added Surface Monitoring and by activating this, you can keep an eye on your subdomains for takeovers using Detectify – even the ones you’ve forgotten about.
You can activate this in the Asset Inventory tab by following these steps:
This new feature allows for higher accuracy since we are able to continuously retrieve subdomains from the original DNS records source, and making it easier for you to identify all the web assets available. Then you can see more of your assets in the Asset Inventory view and decide which of them deserves some more security love.
If you’re a Detectify customer and have questions or thoughts about our Route 53 connector, reach out to your Customer Success Manager or contact our support team at support@detectify.com.
If you’re currently evaluating Detectify and would like to learn more about the Route 53 connector or Surface Monitoring, you can request a demo to get started today.
Application environments are more complex than ever, with APIs forming the critical connective tissue. But this proliferation has created a vast, often invisible, attack surface. …
The average organization is missing testing 9 out of 10 of their complex web apps that are attacker-attractive targets. To address this, we’re launching new …