Sentinel Services

WhiteHat Sentinel – Standard Edition

WhiteHat Sentinel Standard Edition (SE) is designed for websites that are a permanent fixture in a customer’s online experience, but is not necessarily mission-critical and which has multi-step form-based processes.

SE is an appropriate solution for companies with ten to hundreds of websites that have best practice or PCI 6.6 compliance requirements. Sentinel SE includes configured assessment delivery and comes standard with verified vulnerability reporting. Sentinel SE replaces scanners that are ineffective, generate an inordinate amount of false positives and aren’t scalable. WhiteHat Sentinel SE also offers an easy migration path to the Sentinel Premium Edition.

Sentinel SE Assesses forthe Following Classes of Attacks

Technical Vulnerabilities

Business Logic Flaws

Command Execution
– Buffer Overflow
– Format String Attack
– LDAP Injection
– OS Commanding
– SQL Injection
– SSI Injection
– XPath Injection

Information Disclosure
– Directory Indexing
– Information Leakage
– Path Traversal
– Predictable Resource Location

Client-Side
– Content Spoofing
– Cross-site Scripting (XSS)
– HTTP Response Splitting

N/A

“Website security is top of mind for customers conducting business on our sites. We take security and compliance challenges very seriously as we’ve seen more issues erupt in the public arena surrounding serious breaches with sensitive data housed online. Caremark is eager to engage with WhiteHat, an industry standard-bearer, for the certification program to demonstrate the measures we are taking to assure site visitors of the level of security we maintain across our websites.”

– Shamoun Siddiqui
Manager, Information Security, CVS Caremark