Onsek Onsec

The Onsek company is the diversified company which is engaged in software development and rendering consulting services in the field of information security of web applications.

History

2017

Among clients there is Valarm in Runet for 2017 — Tinkoff Bank, Ulmart, HeadHunter and QIWI.

2016

Valarm attracted $2.3 million investments after passing of Y Combinator

Valarm platform hacker attracted to protection of web applications against the attacks at the end of 2016 2.3 million dollars USA from venture funds Partech Ventures and Gagarin Capital and also partners of the American business incubator Y Combinator. Earlier in the summer of 2016 the command passed the three-months program of acceleration Y Combinator in Silicon Valley, and in the past in Valarm already invested venture fund Runa Capital.

Among clients Valarm about one hundred large technology companies are payment and search services, online stores and financial institutions. Yandex, QIWI, Ulmart, Eldorado, Acronis, IVI and also western customers, for example, Automattic (WordPress developer) use a product.

"The modern companies use flexible development approaches, and, as a result, update the applications every day or even more often. Valarm allows not to worry concerning vulnerabilities and other problems which are inevitable at such number of updates — Ivan Novikov, the founder of Onsek company says. — Such companies as Facebook pay to researchers to 15 thousand dollars for one critical vulnerability. Valarm finds many of them in the automated mode".

"Lately all of us hear about machine learning and artificial intelligence more. It is remarkable that the Onsek company in 2013 relied on use of machine learning for protection against the hacker attacks and now significantly is ahead of competitors technology. This fact and also progress of the company in international market, allowed to attract a new round of financing from Partech Ventures, the international fund with examination in information security field which invested in such companies as Bug Crowd earlier" — Galperin Dmitry, the director of Runa Capital investments says.

In the summer of 2016 Valarm passed through the known American business incubator of Y Combinator which invested 120 thousand US dollars in the company. This program was finished earlier by such companies as Dropbox, Airbnb, Reddit and Docker and many others.

In 2016 Valarm large online retailers (Ulmart), banks (Yugra Bank, Modul Bank), payment systems (QIWI, Xsolla), electronic marketplaces, online games, advertizing networks are among clients. The company is a technology partner of Qrator Labs and InfoWatch with which issues the integrated solutions. Also Valarm — the partner of NGINX company which Web server is used in 44% from top-1000 the websites of the Internet.

Skolkovo will select 5 million rubles on Valarm – the solution for protection of web applications

The resident of a cluster of information technologies of Skolkovo Foundation Onsek company — the Russian software supplier developing solutions for protection of applications and API to which trust hundreds of the companies and SaaS services worldwide — got in the spring of 2016 approval of the request for a minigrant in the amount of 5 million rubles from committee on minigrants. Funds will be allocated for expansion of opportunities of the solution for protection of web applications which integrates functions of a firewall of web applications and a vulnerability scanner.

Ilyin Stepan, chief operating officer of Onsek: "Money will go for development of new opportunities of the solution for protection of web applications and API. Including, for improvement of detecting of the attacks, creation of more convenient visualization of structure of the protected applications — the application model automatically forms as a result of machine learning to reduce the level of false operations. Also the integration module of compatibility with CISCO ACI technology will be developed. The current solution "Valarm" is in demand among the technological companies which deal with high loads and frequent updatings of the application. Other products it is banal not can be scaled, or give a large number of false operations because of impossibility to adapt quickly to changes of applications. Besides Valarm is the only product integrating in itself WAF and a vulnerability scanner".

Sergey Hodakov, head "Technologies of Information Security" of a cluster of information technologies of Skolkovo Foundation: "Protection of web applications becomes crucial for safety of business. Nevertheless, the existing means of protecting of web applications (Web Application Firewall, WAF) do not provide due protection against relevant threats. In the solution "Valarm" departs from a concept of classical Web Application Firewall, integrating usual protection of the web application against the attacks using methods of machine learning with continuous process of search of vulnerabilities in the web application. Thus Valarm monitors two main aspects of security of the web application: books continuous audit regarding search of vulnerabilities of new functionality of the application and provides continuous protection of the working web resource against the hacker attacks. The grant Skolkovo will allow a command to expand functionality of the solution that will allow the company to strengthen the positions in Russia and to successfully continue commercialization in international market".

2009: Information security audit of the companies

The Onsek command works in the field of data protection since 2009, performing an information security audit for a number of the large companies in Russia, the USA and Europe.

Awards

The command is mentioned by numerous awards, including the first place at the tender "Month of Search of Vulnerabilities of Yandex" in 2011.