Any Stopthehacker alternative for hosts?

Portal Home > Knowledgebase > Articles Database > Any Stopthehacker alternative for hosts?

Posted by albatroz, 09-02-2012, 09:43 PM
Stopthehacker looks like an interesting product for evaluating the vulnerabilities of websites and web apps but I wish there was a product that could be used by a hosting provider (like us) and scan all the websites we host. Stopthehacker's current pricing is simple too expensive for this purpose.
Posted by TravisT-[SSS], 09-02-2012, 10:55 PM
Seems like a waste of money. I mean, everything they cover is not needed if you properly secure you website and have a good hosting setup. I would spend the extra money for a good host then spend it on monitoring protection services which by then mater not if you have been hacked. So spend about the same and just get yourself secured.
Posted by TravisT-[SSS], 09-02-2012, 11:21 PM
Forgot to answer part of you question, got sidetracked. Look into http://www.rfxn.com/projects/linux-malware-detect/ it does a pretty ok job. OSSEC/Snort do amazing jobs as well.
Posted by Oliver-STH, 09-03-2012, 01:36 AM
albatroz: Simply send us an email at support@stopthehacker.com with your request and our sales team will get back to you with a suggestion. The costs you see on our website are for end-customer . But we partner a lot with Hosting Partners. @SolidShellSecurity: Regarding our solution. We provide a monitoring protection service, like you are recommending. Our solutions include Website Monitoring and Malware removal, Vulnerability Assessment, Blacklist Monitoring as well asSpeed and Uptime Monitoring.
Posted by albatroz, 01-18-2013, 02:49 PM
For instance I have a website that was compromised by exploiting an upload form of a custom made CMS. While I used RXFN to detect the rogue code, it wouldn't have detected the vulnerability of the form. However StopTheHacker probabably wouldn't have detected it neiher.
Posted by brianoz, 01-18-2013, 08:30 PM
Try configserver.com's cxs. It detects quite a lot and is being actively developed. It will scan an entire server for you and produces reasonable summaries of what has been found. Signatures and scanning is also updated regularly. http://www.configserver.com/cp/cxs.html