WhiteHat Security, a provider of website risk management solutions, unveiled its Threat Research Center (TRC) this week. The company has assembled a team of website security gurus to operate as an extension of an organization’s information security team. As an added component to its SaaS based Sentinel website vulnerability management service, the TRC aims to help enterprises focus on vulnerability remediation, overall risk posture, and technology and business goals.
WhiteHat claims that the service the TRC team provides cannot be accomplished using automated scanners alone. With a hands-on approach, TRC engineers utilize the automated scanning capabilities and reports generated by the WhiteHat Sentinel service and manually verify which vulnerabilities are real and may pose a threat, while also eliminating false positives. The goal is to provide enterprises with continuous and current website security, a challenge for consultants and automated tools to do on their own.
WhiteHat’s TRC engineers have assessed more than 2,700 websites, and the WhiteHat Sentinel vulnerability database currently maintains 26 million vulnerability patterns. Adding the WhiteHat TRC to the equation, customers don’t just rely on an automated solution, but get an experienced team, actively monitoring and responding to threats to help protect critical attack targets.
The TRC will also work with developers to provide guidance on identifying critical design-flaws and implementation practices, as they relate to security.
WhiteHat Security was founded in 2001 by Jeremiah Grossman, a former Yahoo! information security officer and is headquartered in Santa Clara, California.