Web security audit. Difficult, but solvable task.

Moscow, on May 19, 2010 – [1]Pointlane-company the system integrator in information security field implemented the project on technical audit of web resources of Krossfinance LLC company.

CROSSfinance.RU is the information and analytical portal devoted to bank and insurance subject and providing interactive web services in the following directions:

• credits;
• deposits;
• bank cards;
• insurance of vehicles, including car insurance;
• life insurance and health;
• and other types of service in the field of insurance and bank service.

CROSSfinance.RU services allow to carry out the deep and detailed analysis of banking and insurance products online for very short time – several minutes. Possibilities of CROSSfinance.RU services allow to run for search in different financial products, to calculate key indicators on these products, to compare results of selection on a large number of different factors, to create requests for banking and insurance products online.

Thus, CROSSfinance.RU gives to visitors an opportunity to choose the most attractive from among suitable financial products for a short period and to compare the picked-up product, to offers of other financial institutions. The continuity of work of service and operational service of visitors of the portal and clients of the company are the main requirements of Krossfinance LLC.

The customer set a website research problem on existence of vulnerabilities by means of which the malefactor can operate the website and do harm to the company, her clients and visitors of the portal.

The Pointlane company was selected from quality of provider of services in view of wide practical experience of implementation of similar projects and also because of the reasonable and most optimal budget for this work.

The information security audit of the website took about two weeks. During these works as specialists of Pointlane company the detailed research of the website, both using the automated means, and by means of the expert analysis was conducted. In the course of the research a number of the typified vulnerabilities was revealed.

Elimination of the found vulnerabilities and also increase in level of information security of a web resource of Krossfinance company is result of the done work.

"Today the competition in the Internet is at very high level. Accuracy and speed of work of services are the important factors influencing solutions of the visitor to leave a resource or to continue to use of Understanding that the malefactor can operate the website, doing material and reputation harm, roused us to making decision on carrying out substantive audit of information security; CROSSfinance.RU is rather large-scale online project, and the operability of each its service is an important component of all mechanism. We are very happy with results of the audit booked by Pointlane company. Efficiency of accomplishment of the tasks set for the company and competence of technical specialists out of any praises. Ambitions of development of services of the Internet portal CROSSfinance.RU allow to judge that we will continue cooperation with Pointlane company at least within an information security audit also from now on", - the CEO of Krossfinance LLC company Evgeny Smirnov' 'comments'.

"More and more people use services of Internet services and Online stores. Internet commerce turnovers steadily grow, becoming the desired purpose for web malefactors whose activity remains at the high level. It is obvious that suspension or failures in work of service or the website will cause loss of the existing and potential clients that, undoubtedly, will affect income and image of the company. For this reason ensuring due level of information security is one of the most important elements of this type of business", - the managing partner of Pointlane company Alexey Korolev says.

Information source: http://www.pointlane.ru