What is BlackHatWing?

BlackHatWing provides on-demand vulnerability assessment and management through a Web services platform. Blackhatwing offers:

Device identification

Vulnerability detection

Remediation advice and workflow

Security policy enforcement

Fix verification

BlackHatWing enables users to measure their vulnerability status and enforce corporate remediation standards in order to comply with corporate and government data security policies.

Why scan for vulnerabilities?

There are many reasons to perform regular vulnerability assessments, including:

Prevent business loss — System downtime, lost revenue, cleanup costs, and loss of trade secrets due to network compromises cost businesses millions each year. Hacks cost an average of $53,000 each for response, investigation, recovery, and prosecution, not including the potentially immeasurable business cost of lost proprietary or confidential data.

Everyone is a target for attack — Today, everyone with an Internet connection is a potential target for attack. A 2002 CIA/FBI survey showed that 90% of respondents had detected security breaches within the last 12 months. Even if your network does not hold any data that an attacker would want, it can still serve as a launching pad for attacks on others. Automated attack tools - such as worms like Blaster - simply look for vulnerable hosts, without consideration of who owns them. Unauthorized wireless access points are now becoming commonplace, providing an additional attraction to potential hackers.

Perimeter Defenses are no longer sufficient — Recent worms such as SQL Slammer and Blaster use covert channels to target internal networks, proving that traditional perimeter defense mechanisms alone (such as IDS, Anti Virus, and Firewalls) cannot provide adequate protection from the latest generation of attacks.

Regulatory compliance — Privacy regulations such as Gramm-Leach-Bliley Act (GLBA), HIPAA, SB1386 and Sarbanes-Oxley carry requirements for protecting the privacy and confidentiality of patient, customer and financial data, with legal and monetary penalties for failures to comply. Today, almost all companies doing business over the Internet- directly or through partners are subject to some form of compliance regulation.

Business and Trading Partner security — Companies with extranets that support partnerships, supply-chain management, and other business processes need to be sure that their partners' networks have been secure, and that their own network does not threaten their partners' data security.

What makes Blackhatwing different from its competitors?

Blackhatwing is solely and exclusively focused on building the best vulnerability management solution available. As the market leading Web service for vulnerability management, we focus our resources on innovation, quality assurance and customer support for the following competitive advantages.

Accuracy — Third party analysis demonstrated that Blackhatwing maintains the most comprehensive list of critical security vulnerabilities (nearly twice that of our nearest competitor). More important than shear number is Blackhatwing' accuracy. Unlike open source solutions, Blackhatwing continually checks the accuracy of all reported vulnerabilities, patches and fixes. Through continuous improvement and monitoring, Blackhatwing has virtually eliminated false positive and false negatives, making Blackhatwing the solution you and your customers can rely on.

Always Up to Date — Since all scanning accesses the latest Blackhatwing vulnerability database, customers are protected from the latest vulnerabilities. Blackhatwing updates its databases three times a day, and automatically checks that remedies and links remain valid.

Distributed Scanning With Centralized Reports — Global scanning infrastructure inside and outside the firewall.

Lowest Cost of Ownership — There are no hidden costs for hardware, supporting software or labor to install or maintain Blackhatwing over time. These costs tend to be $3-5 per $1 of software for other solutions. Blackhatwing automatically consolidates data into professional reports, a difficult and time consuming activity for standalone solutions. Finally, industry-leading accuracy means that users do not need to waste time investigating false positives, one of the biggest hidden costs of vulnerability scanning.

Performance — Because Blackhatwing accurately identifies types of devices, operating systems, versions and available ports, our inference-based scanning engine is able to very efficiently scan for applicable vulnerabilities, making Blackhatwing among the fastest scanners available. Our hosted scanning service automatically distributes scanning workload among multiple servers worldwide to provide an unmatched scalability for large, multi-location scans.

Easy to Implement/Maintain — A Web service uses the Internet as its infrastructure, and can therefore be deployed in minutes anywhere. Updates and maintenance occur automatically. Training on Blackhatwing is minimal. In just a few hours, a professional can become proficient at using and applying the full suite of Blackhatwing capabilities. All of this allows an organization to focus IT and security resources on supporting its core business, not on managing their vulnerability assessment solution.

Why should I partner with BlackHatWing?

There are many reasons to partner with BlackHatWing, depending upon the type of business you are in.

Resellers are able to provide a high-value, in-demand service to address their customers increasing data security and regulatory compliance concerns. The recent flurry of high-profile network attacks, along with a growing number of broad security compliance regulations have made security management a top of mind, board level issue for small and large enterprises. Consultants are able to dramatically reduce their engagement costs for one-time and ongoing security services, while providing superior results and a third-party service to document results over time. MSSPs and outsourcers can offer a differentiated managed vulnerability scanning service with minimal investment. Through correlation of BlackHatWing results with other managed services, MSSPs can dramatically reduce the cost of dealing with irrelevant alerts or "false positives". Finally, BlackHatWing offers an indelible, independent third-party audit mechanism to validate SLAs and meet regulatory audit requirements.