ImmuniWeb

ImmuniWeb is a global application security company based in Geneva, Switzerland that develops Machine Learning and Artificial Intelligence technologies for Application Security Testing, Attack Surface Management and Dark Web Monitoring provided via ImmuniWeb AI Platform in over 100 countries. Some of the ImmuniWeb founders came from High-Tech Bridge, a leading European web security company company specialized in penetration testing and digital forensics. High-Tech Bridge was named an Industry Leader and Best Service Provider among ethical hacking and penetration testing companies by Frost & Sullivan's market research in 2012.[2]

ImmuniWeb
Private
IndustryApplication Security
Founded2019 (2019)
FounderIlia Kolochenko
Headquarters
Geneva
,
Switzerland
Area served
Europe
North America
APAC
Key people
Ilia Kolochenko (CEO)[1]
William Weber (CFO)
Stéphane Koch (Vice President)
Marsel Nizamutdinov (CTO)
ProductsImmuniWeb AI Platform
ServicesApplication Security Testing,
Attack Surface Management,
Dark Web Monitoring
Number of employees
50+
Websitewww.immuniweb.com

History

ImmuniWeb was founded by Ilia Kolochenko, Swiss application security expert, SC Media "Thought Leader",[3] Forbes Technology Council member,[4] contributing editor to SC Magazine UK, Dark Reading and IDG's CSO Online.[5]

Security Research

Security Advisories

High-Tech Bridge Security Research Team has released over 500 security advisories[6] affecting various software, with issues identified in products from many well-known vendors, such as Sony,[7] McAfee[8] Novell,[9] in addition to many web vulnerabilities affecting popular open source and commercial web applications, such as osCommerce,[10] Zen Cart,[11] Microsoft SharePoint, SugarCRM and others.

High-Tech Bridge's Security Research Lab was registered as CVE and CWE compatible by MITRE.[12] High-Tech Bridge is one of only 24 organizations, globally, and the first in Switzerland, that have been able to achieve CWE certification.

The company is listed among 81 organizations, as at August 2013, that include CVE identifiers in their security advisories.[13]

High-Tech Bridge launched an SSL/TLS configuration testing tool in October 2015.[14] The tool can validates email, web or any other TLS or SSL server configuration against NIST guidelines and checks PCI DSS compliance, it was cited in articles covering the TalkTalk data breach.[15][16]

Web Vulnerability and Privacy Research

The discovery of vulnerabilities in Yahoo! sites by High-Tech Bridge was widely reported,[17][18] leading to the t-shirt gate affair and changes in Yahoo's bug bounty program. High-Tech Bridge identified and reported four XSS vulnerabilities on Yahoo! domains, for which the company was awarded two gift vouchers to the value of $25.[19][20][21][22] The sparse reward offered to security researchers for identifying vulnerabilities on Yahoo! was criticized, sparking what came to be called t-shirt-gate,[23] a campaign against Yahoo! sending out T-shirts as thanks for discovering vulnerabilities. High-Tech Bridge's discovery of these vulnerabilities and the subsequent criticism of Yahoo!'s reward program led to Yahoo! rolling out a new vulnerability reporting policy which offers between $150 and $15,000 for reported issues, based on pre-established criteria.[18][24]

In December 2013, High-Tech Bridge research[25] on privacy in popular social networks and email services was cited[26][27] in a class action lawsuit for allegedly violating its members' privacy by scanning private messages sent on the social network.

In October 2014 High-Tech Bridge discovered a Remote Code Execution vulnerabilities in PHP.[28]

In December 2014, High-Tech Bridge identified the RansomWeb attack,[29] a development of Ransomware attacks, where hackers have started taking over webs servers, encrypting the data on them and demanding payment to unlock the files.

In April 2014, the discovery[30] of a sophisticated Drive-by download attacks, revealed how drive-by download attacks are used to target specific website visitors after their authentication on a compromised web resource.

In December 2015, High-Tech Bridge tested the most popular free email service providers, for SSL/TLS email encryption.[31] Hushmail, previously considered as one of the most secure email providers, received a failing "F" grade. Just after, the company updated its SSL configuration and received a score of "B+".[32]

Awards and Recognition

In March 2015, ImmuniWeb was recognized in Frost & Sullivan's 2015 Market Insight as being 'the most complete hybrid offering available'.[33]

In April 2016, High-Tech Bridge was selected as a Red Herring Europe 2016 Winner.[34]

SC Media Reboot 2016 named ImmuniWeb an Industry Innovator in the Analysis and Testing category.[35]

In April 2017, Frost & Sullivan's research on machine learning in Application Security Testing (AST) recognized High-Tech Bridge as the most innovative player on AST marketplace, outperforming HPE and IBM Security.[36]

In May 2017, Gartner named High-Tech Bridge a Garter Cool Vendor in "Cool Vendors in Security for Midsize Enterprises, 2017" by Adam Hils.[37]

In June 2017, High-Tech Bridge was selected as the SC Awards Europe 2017 winner in "Best Emerging Technology" category.[38]

In June 2018, ImmuniWeb was named the Winner in “Best Usage of Machine Learning / AI” category at SC Awards Europe 2018 outperforming six other finalists including IBM Watson for cybersecurity.[39]

In December 2018, IDC included ImmuniWeb into "IDC Innovators: Mobile App Security Testing, 2018" for ImmuniWeb.[40]

In December 2019, SC Media included ImmuniWeb into the Elite “Hall of Fame” of SC Media’s Reboot 19 Innovator Award.[41] The top-level recognition is awarded exclusively to cybersecurity vendors recognized as Industry Innovators for three consecutive years by SC Media Labs market research.


Organizational Memberships

ImmuniWeb is a member of a number of security-related organizations, including:

References
  1. "Articles by Ilia Kolochenko". CSO Online. Retrieved 22 July 2015.
  2. "The Importance of Ethical Hacking: Emerging Threats Emphasis the Need for Holistic Assessments". Frost & Sullivan. Retrieved 19 April 2012.
  3. "Thought Leaders – Ilia Kolochenko". 23 August 2017.
  4. "Forbes Technology Council Member Spotlight: Ilia Kolochenko". 11 July 2016.
  5. "Ilia Kolochenko". 11 July 2015.
  6. "Packet Storm - Files from High-Tech Bridge SA". PacketStorm.org. Retrieved 20 February 2016.
  7. "Security Update Program for VAIO® Personal Computers". esupport.sony.com. Sony. Retrieved 20 January 2015.
  8. "McAfee Security Bulletin - McAfee MVT & ePO-MVT update fixes an "Escalation of Privileges" vulnerability". kc.mcafee.com. McAfee. Retrieved 20 January 2015.
  9. "Security Vulnerability: GroupWise Client for Windows Remote Untrusted Pointer Dereference Vulnerability". www.novell.com. Novell. Retrieved 20 January 2015.
  10. "Researchers at Swiss-based security firm High-Tech Bridge have identified serious vulnerabilities in several popular web applications". SecurityWeek. Retrieved 20 February 2016.
  11. "Critical Zen Cart vulnerability could spell Black Friday disaster for online shoppers". BetaNews. Retrieved 20 February 2016.
  12. "Product from High-Tech Bridge Now Registered as Officially "CWE-Compatible"". MITRE. Retrieved 7 August 2014.
  13. "Organizations with CVE Identifiers in Advisories". 26 June 2013. Retrieved 1 September 2013.
  14. "Free PCI and NIST compliant SSL test". Help Net Security. Retrieved 23 October 2015.
  15. "TalkTalk boss receives ransom demand as massive customer data breach deepens". The Inquirer. Retrieved 23 October 2015.
  16. "TalkTalk CEO admits security fail, says hacker emailed ransom demand". The Register. Retrieved 23 October 2015.
  17. "Yahoo to pay up to $15,000 for bug finds after 't-shirt gate' scandal". 3 October 2013.
  18. Kirk, Jeremy (3 October 2013). "Yahoo security bounty program ditches T-shirts for cash". Retrieved 19 October 2013.
  19. Rubenking, Neil J. (1 October 2013). "Yahoo Offers Sad Bug Bounty: $12.50 in Company Swag". PC Magazine. Retrieved 19 October 2013.
  20. Bilton, Ricardo (1 October 2013). "'I reported a major Yahoo security vulnerability and all I got was this lousy T-shirt'". Retrieved 19 October 2013.
  21. Frank, Blair Hanley (1 October 2013). "Researchers find critical vulnerabilities in Yahoo's site, offered $12.50 per bug". Retrieved 19 October 2013.
  22. Hackney, Steve (7 October 2013). "Yahoo! Inc. (NASDAQ:YHOO) Removes Bugs Identified By High Tech Bridge". Retrieved 19 October 2013.
  23. Osborne, Charlie (3 October 2013). "Yahoo changes bug bounty policy following 't-shirt gate'". Retrieved 19 October 2013.
  24. Martinez, Ramses (2 October 2013). "So I'm the guy who sent the t-shirt out as a thank you". Retrieved 19 October 2013.
  25. "Social networks: can robots violate user privacy?". Archived from the original on 2014-01-03. Retrieved 2014-01-13.
  26. "Facebook sued for allegedly intercepting private messages".
  27. "Is Facebook spying on you?". CNBC.
  28. Brook, Chris. "PHP patches buffer overflow vulnerabilities". threatpost. Retrieved 27 October 2014.
  29. Fox-Brewster, Thomas. "RansomWeb: Crooks Start Encrypting Websites And Demanding Thousands Of Dollars From Businesses". Forbes.com. Retrieved 1 February 2015.
  30. Gallagher, Sean (13 April 2015). "Universal backdoor for e-commerce platform lets hackers shop for victims". arstechnica. Retrieved 14 April 2015.
  31. "Testing Your SSL Encryption Can Provide Important Security Insights". IBM Security Intelligence. 15 December 2015. Retrieved 15 December 2015.
  32. "High-Tech Bridge Grades Email Services on Security, Gives Fastmail Top Score". Talkin Cloud. 3 December 2015. Retrieved 3 December 2015.
  33. Martin Hoff ter Heide. "The Rise of Hybrid Web Application Security Testing". www.frost.com. Retrieved 31 March 2015.(subscription required)
  34. "2016 Top 100 Europe Winners". Red Herring. Retrieved 14 April 2016.
  35. "Reboot 2016". SC Magazine. Retrieved 14 December 2016.
  36. "How Machine Learning will Strengthen the Web Application Security Testing Market". Frost & Sullivan. Retrieved 19 April 2017.
  37. "Gartner Cool Vendors in Security for Midsize Enterprises". Gartner Inc. Retrieved 24 June 2017.
  38. "SC Awards Europe 2017". SC Media. Retrieved 24 June 2017.
  39. "SC Awards Europe 2018". SC Media. Retrieved 6 June 2018.
  40. "IDC Innovators: Mobile App Security Testing, 2018". IDC. Retrieved 6 November 2019.
  41. "SC Media's 2019 Innovators and Hall of Fame". SC Media. Retrieved 29 July 2020.
  42. "CVSS Adopters". FIRST. Retrieved 9 April 2014.
  43. "Global Partnerships". International Telecommunications Union. Retrieved 10 April 2014.

See also
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.