Web Application Scanning

Gartner states that 75% of the attacks occur in the application layer, which makes web applications the most vulnerable layer in your IT environment. Our web application scanner automatically and continuously scans your web applications and APIs for an ever-increasing number of vulnerabilities. We find OWASP top 10 vulnerabilities, misconfigurations, weak passwords, and exposed system information and personal data – in all types of applications.

Book demo now

Contact sales

Features Details Distribution options Services Customers Resoruces FAQ Pricing Free demo

KEY FEATURES

Find weaknesses where you are the most vulnerable

Automated and continuous scanning of web applications detects vulnerabilities related to bad code, misconfigured systems, weak passwords and exposed system information and personal data.

Automatic & continuous

Just in a month, there are thousands of new known vulnerabilities. Scheduled and continuous scans find new vulnerabilities fast.

Systematic & proactive

Our platform provides a great foundation for systematic and risk-based work with your cyber security defense.

Risk-based

Don’t get lost by all the data. Our platform helps you understand what vulnerabilities to remediate first through a number of automated and simple tools.

Complete coverage

We cover every type of web application, public as well as local. Intranets, commercial websites, portals, and more.

COMPLIANCE

Meet existing & future compliance

Along with the growing threat picture there are new legal requirements, standards and certifications. We help you meet existing and future requirements.

OWASP top 10
GDPR
PDPA
NIS

Planning your cyber defense?

Book a demo of our Vulnerability Management platform.

Book demo now!

VULNERABILITIES

OWASP top 10 and more

Our web application scanner finds a wide range of vulnerabilities in your web applications.

Large number of common web application vulnerabilities.
OWASP top 10 vulnerabilities.
Several thousands of vulnerabilities in specific CMSs such as WordPress.
Vulnerabilities in REST APIs.

xxx

TECH DETAILS

Features & functions

Scans web applications requiring authentication.
Scans of local cloud infrastructure, such as AWS.
Detects outdated and vulnerable JavaScript components.
Detects web application configuration and faulty permission.
Detects the exposure of personal data, credit card numbers, and passwords.
Detects the exposure of system information.
Fuzz testing (detects if a web application behaves irrationally or unexpectedly).
Warns if SSL certificates have expired, are about to expire, or are vulnerable.
Automatically identifies web servers, programming languages, and databases.
Automatic update of vulnerability database.
High precision with a low number of false-positives.
Continuous Monitoring.
SAML 2.0 Single Sign-On.
Role-Based Access Control (RBAC).
Full IPv6 support.

DISTRIBUTION OPTIONS

Cloud & on-premise – one technology

Our platform can be distributed in two ways. Safe and secure from several global datacenters as a cloud service, or installed within your own infrastructure as on-premise with local storage. You simply choose what distribution option that suits your organization best.

Cloud

Safe and secure management and storage in the cloud. Select what physical datacenter that suits you. Get started in just minutes.

Go with cloud

On-premise

Installed and operating within your own infrastructure, with local data storage. Automatic software and vulnerability test updates.

Go with on-premise

ORCHESTRATION

Administration

Security Center

Security Center is our easy-to-use web-based control panel that gives comprehensive insights and helps you manage vulnerabilities. Through flexible dashboards and reports, you get a visual overview of current data, development over time, and more. Security Center supports Role-Based Access Control (RBAC).

More about Security Center

Organizer

Organizer enables different people, groups of users, departments, or countries to be given isolated access to relevant vulnerability data while maintaining a centralized administration. Get the best of two worlds – decentralized management to engage your teams, while still having support for centralized management.

More about Organizer

SERVICES

Maximum effect - maximum ROI.

Product support

Continuous support from our Vulnerability Management Experts.

Workflows & routines

We help you set up workflows and routines for success within Vulnerability Management.

Follow-up meetings

Continuous follow-up meetings together with our Vulnerability Management experts to support the assessment and prioritization.

Maximum advantage

Together we make sure that you’re taking advantage of all powerful features in our platform – existing as well as new ones.

Trusted by

Resources

Read about Web Application Scanning and related topics in our resource bank.

How to combine vulnerability assessment & penetration testing

What is what and how are these two methods used together? Holm Security explains the methods. Vulnerability assessment and penetration testing are both very important methods to maintain a high level of IT security in your organization.

25 November, 2019 • Blog

outsourcing-it-vulnerability-assessment-holmsecurity

Outsourcing & vulnerability assessment – a perfect combo

More than 70% of all organizations outsource their IT to a greater or lesser extent and it’s continuously increasing. Outsourcing gives many advantages, but also new challenges for the IT organization.

26 November, 2018 • Blog

hacker-working-on-computer-cyber-crime-holmsecurity

How hackers use legitimate-looking domains to attack you

Hackers use multiple techniques of manipulation to trick you into opening a malicious website. In this article, you will find information related to UTF-8 characters used in domain names.

17 June, 2019 • Blog

FAQ

Here we answer the most frequent questions. We love to answer questions you have about vulnerability management in general or about our platform.

Do you scan all type of web applications?

Yes, we scan all type of web applications, such as commercial websites, intranets, portals, admin interfaces and more.

Do you scan for OWASP top 10 vulnerabilities?

Yes, we scan for OWASP top 10 vulnerabilities according to the latest version, 2017.

Do you support authenticated scanning?

Yes, we support both authenticated and unauthenticated scanning. With authenticated scanning we scan the “inside” of your applications.

How long does it take to get started?

It only takes a few hours to get started with our powerful and easy-to-manage platform. Contact us and we will help you get started today.

Do you support Risk-Based Vulnerability Management?

Yes, we provide a number of powerful features to support a modern Risk-Based Vulnerability Management (RBVM) approach. We also provide Professional Services to make sure you get maximum security out of your investment in our platform.

Is there any software or hardware required?

No, using Holm Security VMP | Cloud doesn’t require any software or hardware. But for local scanning, you need to install one or multiple Scanner Appliances, which is a virtual appliance. When using Holm Security VMP | OnPrem you will need to install minimum of two virtual instances. One Core Appliance and one Scanner Appliance.

HOLM SECURITY

Cyber Security Starts Here

The fastest and most efficient way to automated and continuous Vulnerability Management for your entire infrastructure – systems, web applications and users. All-in-one platform.

Web Application Scanning

Starting at

EUR

17,85

EUR

$21,75 USD / web application

Monthly price based on 25 web applications.

Request quote

All features & functions included
Scan as much as you can
Qualified local support

Welcome to India!

Welcome to Malaysia!

Tervetuloa Suomeen!

Holm Security i Sverige

Welkom in de Benelux!

Holm Security i Norge

Holm Security i Danmark

Web Application Scanning

Find weaknesses where you are the most vulnerable

Automatic & continuous

Systematic & proactive

Risk-based

Complete coverage

Meet existing & future compliance

Planning your cyber defense?

OWASP top 10 and more

Features & functions

Cloud & on-premise – one technology

Cloud

On-premise

Administration

Security Center

Organizer

Maximum effect - maximum ROI.

Product support

Workflows & routines

Follow-up meetings

Maximum advantage

Trusted by

Resources

How to combine vulnerability assessment & penetration testing

Outsourcing & vulnerability assessment – a perfect combo

How hackers use legitimate-looking domains to attack you

FAQ

Do you scan all type of web applications?

Do you scan for OWASP top 10 vulnerabilities?

Do you support authenticated scanning?

How long does it take to get started?

Do you support Risk-Based Vulnerability Management?

Is there any software or hardware required?

Cyber Security Starts Here

Web Application Scanning