Services

• Website vulnerability scanning

• Giám sát website 24/7

• Instant alerts when risks are detected

• Send periodic reports

• Vulnerability remediation guide

• Assess configuration, patches, and applications

• Scan over 60,000 tests on multiple operating systems (Windows, Unix, Cisco, Linux, VMWare, VPS…)

• Detect structural and system design vulnerabilities

• Detect missing patches/hotfixes

• Detect malware on servers

• Detect password weaknesses

• Perform testing according to OSSTMM, OWASP, PCI DSS, NIST

• Process includes: Information gathering → System identification → Scanning → Exploitation testing → Report & recommendations

• Perform over 1000 tests according to PCI DSS, SOX, HIPAA, DISA STIG, CIS Benchmarks standards

• Supports Oracle, Microsoft SQL, IBM DB2, MySQL, Sybase, PostgreSQL…

• Detect database configuration weaknesses

• Detect missing patches

• Detect account and password vulnerabilities

• Assess data storage and transmission processes

• Process includes: Collection → Assessment → Proof of Concept Exploitation → Report & Recommendations

Two forms of assessment:

• Mobile Application Penetration Test

• Mobile Application Source Code Review

Compliant with OWASP Mobile Security, OWASP MSTG v1.2, OWASP API Security Top 10, OSSTMM.

Features include:

• Data protection audit

• Test functionality & network connectivity

• Authentication verification, session management

• Source code analysis & reverse engineering

• Detect libraries with vulnerabilities

• Support Android, iOS

• Assess Cloud deployment architecture

• Review permissions and group assignments

• Detect misconfiguration

• Review source code of services (Lambda, Cloud Function…)

• Comply with CIS AWS, CIS GCP, CIS Azure Foundations Benchmark

• DevSecOps consulting with CI/CD systems

• 6-step process from survey to reassessment

• Scan and handle malware on computers, servers, websites and networks

• Detect APT, Ransomware, targeted malware

• Support IT and OT environments

• Consulting on antivirus solutions according to Vietnamese and international standards

• Use PCAudit, EDR, DS SIEM, Network Detection, Malware Analysis Sandbox & AI

• Centrally manage 4Network, 4Website, 4Server, 4Database, 4MobileApp, 4Cloud sensors

• Real-time alerts

• Data synchronization

• Send results to SIEM system

• Overall security report

• Role-based administration and hierarchical management

• Manage vulnerabilities by department, organization

• Intelligent vulnerability remediation process

• Real-time alerts 24/7

• Export international standard reports in Vietnamese

• Adaptive system solution training

• Integrate SMS alerts