External Security Assessment

WatchMouse widget 1.1 released (download widget) (2005-12-17)

WatchMouse releases version 1.1 of their Apple Dashboard site monitoring widget.

NETHERLANDS, 2005-12-16. By means of the WatchMouse widget Apple users get direct insight into the accessibility of their own Internet site. The widget can be downloaded for free from the Apple website.

At regular intervals the dashboard widget checks one or more sites from the users own computer. Also, the availability of the site during the last 72 hours is registered. A problem is followed by an alert, which is then verified by all WatchMouse control stations.

Features

• Checks your website from your own computer every 1, 5, 15, 30, or 60 minutes (new in this release).
• Displays the uptime over the last 72 hours.
• Alerts you in case of an error and...
• Verifies errors from all the WatchMouse worldwide monitoring stations

The new version also fixes some minor bugs. The free WatchMouse site monitoring widget can be downloaded from the Apple website , and requires Mac OS X 10.4 (Tiger) or later.

http://www.apple.com/downloads/dashboard/networking_external security assessment/watchmousesitemonitor.html

Award-winning Web pioneer embarks on European partner drive (2009-05-14)

WatchMouse looks to boost sales of enterprise solutions through channel expansion

LONDEN, UK - WatchMouse, one of the fastest growing companies in the Netherlands, and winner of the Deloitte and Touche rising star award in 2005, is recruiting new value added resellers across Europe.

The company leads the market in subscription self-service website monitoring solutions, and is now expanding its offering with more complex monitoring solutions for large companies. It is looking for established partners with networking or internet external security assessment expertise to take both offerings to market.

Resellers that become a partner, will get margin on WatchMouse subscription fees, delivering recurring revenue. On top of that they can charge fees for additional services, such as configuration, maintenance, setup and consultancy. With the more complex solutions for the enterprise, resellers can also add value through the sale of service contracts.

WatchMouse offers a full support program to its resellers, which includes:

• Marketing material & documentation
• Training
• Second line support
• Leads, generated by its free trial service and marketing activities

"Until now, our self-service monitoring services have been predominantly sold directly by WatchMouse. As more and more large companies are turning to us for services, we need people on the ground that are close to these companies both physically and culturally," said Stan P. van de Burgt, CEO WatchMouse.

"The indirect channel is a prerequisite - especially for our new range of services, as these are typically sold person-to-person, so expertise is needed for both set-up and execution," he added.

New web site monitoring station: Copenhagen, Denmark (2007-09-08)

The WatchMouse network of monitoring stations expands again, this time in Copenhagen, a another site monitoring station in Scandinavia, bringing the total number of checkpoints to 23.

The new checkpoint will appear automatically in your logs. You can also set one of the new checkpoints as the primary checkpoint in your monitoring settings.

The current status of the WatchMouse web site monitoring network can be found on the 'About' tab of the WatchMouse site.

Did you know? Hackers probe your servers for vulnerabilities between 5 and 170 times per week (2007-10-29)

Test your site now: Free 10 day / 10 external security assessment trial

With a dramatic rise in malicious attacks, it is now critical to test your websites and servers for external security assessment vulnerabilities. Having the latest firewalls and Intrusion Detection Systems will not protect your organization if they (or the services behind it) are not kept up-to-date and configured correctly.

This means that verifying the external security assessment of your systems is not something you can do just once, nor should you check this just every now-and-then. New vulnerabilities are identified every day, exploits become available soon after it, and every change in your systems' configurations, however small, may open up new vulnerabilities. Having audited last week does not imply your systems are fine today!

The WatchMouse Periodic Vulnerability Scan is an affordable way to routinely check your company’s external security assessment exposure. Utilizing the most up-to-date database of known vulnerabilities, WatchMouse’s identifies any external security assessment risks and provides you with the peace-of-mind that your web applications are being scrutinized from the perspective of a possible attacker.

Characteristics

WatchMouse offers Periodic Vulnerability Scanning with an outside - hacker's - view, with the following characteristics:

• Currently over 20,000 vulnerabilities are checked. Checks for new vulnerabilities are added on a daily basis.
• The frequency and the intensity of a external security assessment can be tailored to your policies, and implemented immediately on our self-service website.
• Severe vulnerabilities can, depending on your preferences, initiate SMS (text) or paging alerts, giving you, or your webmasters, the opportunity to react quickly in case of new vulnerabilities.
• Extensive reporting is available for each external security assessment, including pointers on how to fix vulnerabilities.
• WatchMouse's unique Vulnerability Scan Customer Console allows you to manage subsequent external security assessments by inspecting differential reports and open issues, declaring vulnerabilities fixed, adding operator comments, etc.

Try now: Free 10 day trial!

Announcing two free contacts for all accounts and alerting via MSN and Jabber (2008-01-08)

WatchMouse starts the new year with a gift: we have added two contacts to all customer accounts for free.
Contacts are used for:

• alerts in case of errors as defined in your Performance Monitoring rules,
• alerts when new issues are found in your Vulnerability external security assessments, and
• custom reports.

We also introduced two new alerting methods: Instant messaging with MSN (Windows Live Messenger) and Jabber.

If you have a Jabber or MSN instant messenger account, add it as a contact in your WatchMouse account and then use these contacts for alerting. Our favourite setup is an escalation group where at the first error an instant message is sent, then if the error persists, after 5 minutes this is followed by an email and/or SMS text message.

WatchMouse develops monitoring widget for Apple users (download widget) (2005-10-21)

WatchMouse has developed a new widget for dashboard, aimed at Internet site monitoring.

NETHERLANDS, 2005-10-13. By means of the widget Apple users can get direct insight into the accessibility of their own Internet site. The widget can be downloaded for free from the Apple website. Last month, WatchMouse was voted a Deloitte Rising Star in the Netherlands, as part of the Fast 50 awards; the list of the 50 fastest growing technology companies.

In 2002, WatchMouse (www.watchmouse.com) introduced a new concept for Internet site monitoring. By means of ongoing simulations of Internet traffic the accessibility of sites and servers is checked. If a site is not responding, an alert message is sent immediately through SMS, telephone, Instant Messenger or e-mail. The sites are checked from sixteen monitoring stations worldwide. This is done 24 hours per day, seven days per week. The service is completely web based: customers don't have to install software, everything is 100% self-service, which keeps the costs low.

The three founders of WatchMouse, Niels Eijsbroek, Stan van de Burgt and Mark Pors are enormous Mac-fans with a total of fifteen Macs in their possession. The monitoring widget is quite unique: it is a combination of a desktop and a hosted application. When the widgets detects a problem with the site it is checking, it alerts the user with a 'beep', followed by the launch of a web browser, which is directed to a web application on watchmouse.com. There the site is checked from 16 different locations worldwide.

Every five minutes

Every five minutes the dashboard widget checks one or more sites from the users own computer. Also, the availability of the site during the last 72 hours is registered. A problem is followed by an alert, which is then verified by all WatchMouse control stations.

WatchMouse has made the widget available free of charge "because we have become addicted to it, ever since we started using the first beta version of the widget", says CCO Niels Eijsbroek. "We give the widget away for free mainly for the fun part. And of course it's also important to bring site monitoring to the attention of our fellow Apple-users."

The free WatchMouse site monitoring widget can be downloaded from the Apple website:

http://www.apple.com/downloads/dashboard/networking_external security assessment/watchmousesitemonitor.html

About WatchMouse

Companies can easily monitor their own Internet sites using WatchMouse's monitoring service. WatchMouse has been monitoring Internet sites and e-commerce applications for companies throughout the world since 2002. WatchMouse has thousands of customers in more than 70 countries. The services supplied by WatchMouse are available in eight languages, and analysis are performed from various locations and over numerous networks, using a world-wide monitoring network.

Further information can be found at: www.watchmouse.com

WatchMouse and Domeny.pl join forces in the Polish market (2005-11-24)

Polish websites verified from the visitors' perspective

Kraków, Poland, 2005-11-08 -- WatchMouse and Domeny signed a reseller and marketing agreement today, joining forces in bringing site monitoring services to the Polish market.

Using the WatchMouse services, companies will instantly be aware of upcoming and/or acute incidents related to its web sites of their clients, and can, as a result, resolve problems in a short time frame.

The websites and their functionality are checked for availability, speed, and conformance from different locations around the world, now including Poland. Because the websites are checked in the same way that visitors are experiencing them, incidents will be detected at an early stage. Also, using WatchMouse's objective periodical reports, it is possible for companies to see if the performance is in accordance with the agreed service levels (SLAs).

WatchMouse extends its network of monitoring stations with a checkpoint in Kraków, hosted by Domeny.pl. The total number of checkpoints is now 17. Domeny.pl also provides the Polish language version of the WatchMouse site and local customer care.

Stan P. van de Burgt, CEO of WatchMouse: "I'm very happy with this deal. The Polish e-service industry is obviously booming, and this results in higher awareness of the external security assessment involved with running web applications that should be available around the clock."

Arkadiusz Szczurowski, CEO of Domeny.pl "We know that WatchMouse products are one of the best in the World. So we decided to co-operate with the company, and we take pride in it. We expect this co-operation to bring both WatchMouse and our business a lot of advantages and satisfaction. Domeny.pl wants to lead WatchMouse monitoring service on Polish market and offer it for business leaders. This will be a great innovation in Poland and also success. In our view, site monitoring is important, because stability, performance, and high availability of the web sites is one of the basic value in all branches of business, both e-business and other business."

"There are about 4 million companies in Poland. We want to direct the offer to the most important on Polish market. We think that the WatchMouse service is a must-have for about 5-10 percent of all business owners."

About Domeny.pl

Domeny.pl was founded in 1997 and is now providing Internet services to about 10.000 business customers with products ranging from Internet domains and hosting services (virtual and dedicated servers), SSL certificates and other products dealing with internet external security assessment. The company's slogan is: We're Trusted by the Best. Among its clients are the biggest and the best known Polish and international companies.

About WatchMouse

Companies can easily monitor their own Internet sites using WatchMouse's monitoring service. WatchMouse has been monitoring Internet sites and e-commerce applications for companies throughout the world since 2002. WatchMouse has thousands of customers in more than 70 countries. The services supplied by WatchMouse are available in nine languages, and analyses are performed from various locations and over numerous networks, using a world-wide monitoring network.

In October 2005, WatchMouse was voted a Deloitte Rising Star in the Netherlands, as part of the Fast 50 awards the list of the 50 fastest growing technology companies.

WatchMouse releases new Site Performance Monitoring Widget for Apple users (download widget) (2006-10-22)

WatchMouse releases 2.0 widget for dashboard, aimed at Internet site performance monitoring.

NETHERLANDS, 2006-10-23. By means of the widget Apple users can get direct insight into the performance of their own Internet site. The widget can be downloaded for free from the Apple website.

In 2002, WatchMouse (www.watchmouse.com) introduced a new concept for Internet site monitoring. By means of ongoing simulation of Internet visitors the performance of sites and servers is verified. If a site is not responding, an alert message is sent immediately through SMS, pager, Instant Messenger or e-mail. The sites are checked from over twenty monitoring stations worldwide. This is done 24 hours per day, seven days per week. The service is completely web based: customers don't have to install software, everything is 100% self-service, which keeps the costs low.

The three founders of WatchMouse, Niels Eijsbroek, Stan van de Burgt and Mark Pors are enormous Mac-fans with a total of twenty Macs in their possession. The monitoring widget is quite unique: it is a combination of a desktop and a hosted application. When the widgets detects a problem with the site it is checking, it alerts the user with a 'beep', followed by the launch of a web browser, which is directed to a web application on watchmouse.com. There the site is checked from over 20 different locations worldwide.

Worldwide monitoring

The new version (2.0.4) brings continuous performance monitoring, even when the Mac is not connected to the Internet, by connecting the widget to a WatchMouse account (free or paid). In October 2005, WatchMouse released the first version of this widget, which was downloaded over 10.000 times.

WatchMouse has made the widget available free of charge "because we have become addicted to it, ever since we started using the first beta version of the widget", says creative director Niels Eijsbroek. "We give the widget away for free mainly for the fun part. And of course it's also important to bring site performance monitoring to the attention of our fellow Apple-users."

The free WatchMouse site monitoring widget can be downloaded from the Apple website:

http://www.apple.com/downloads/dashboard/networking_external security assessment/watchmousesitemonitor.html

About WatchMouse

Companies can easily monitor their own Internet sites using WatchMouse's monitoring service. WatchMouse has been monitoring Internet sites and e-commerce applications for companies throughout the world since 2002. WatchMouse has thousands of customers in more than 70 countries. The services supplied by WatchMouse are available in nine languages, and analysis are performed from various locations and over numerous networks, using a world-wide monitoring network.

In 2005, WatchMouse was voted a Deloitte Rising Star in the Netherlands, as part of the Fast 50 awards; the list of the 50 fastest growing technology companies.

Further information can be found at: www.watchmouse.com

Nedstat and WatchMouse start partnership (2008-04-14)

Online marketing and technical performance in one dashboard

Amsterdam, 14 April 2008 – Nedstat and WatchMouse announce a strategic partnership that brings together online marketing intelligence and technical performance. The new integration allows marketeers and technical managers to always have the same real-time view of the technical status of their online business activities. This makes it possible to react instantly when for instance decreasing online business has a technical cause.

The performance reports of WatchMouse have been seamlessly integrated in Sitestat and can be added easily to any online marketing dashboard. Marketeers now view the same technical site performance data as their technical colleagues, making communication between these disciplines within organisations much more efficient.

Michael Kinsbergen, CEO Nedstat. “The website is principally a marketing and communication channel and therefore the domain of marketeers. But it is also a technical channel so technical management plays an essential role as well. The Sitestat-WatchMouse connection has made the communication between both stakeholders much more direct and easy.”

Stan van de Burgt, WatchMouse CEO, says: “By measuring from different locations on the Internet, we can give a clear view of how the performance of a website is experienced by the visitor. Research has shown that visitors already leave after a waiting period of 4 seconds. The Nedstat and WatchMouse measurements are perfectly complementary in giving insight in the relationship between performance and visitor behaviour.”

The Sitestat-WatchMouse integration is directly available to all joint customers of Sitestat and WatchMouse.

About Nedstat

Nedstat is European leader in website analytics. The products and services enable companies to improve the effectiveness and profitability of their online communication and business.

Nedstat makes website analytics straightforward and accessible for users of all levels and disciplines. Products are easy to use, reports are clear and fast to access, customization is easy and services and support are personal and high quality.

Nedstat employs 180 people in the Netherlands, Belgium, France, Germany, Spain and the United Kingdom.
The client list includes many renowned and internationally operating organizations like ASICS Europe, Electrabel, Ernst & Young, KarstadtQuelle, Renault, Panasonic and Wolters Kluwer. Also, numerous government and not-for-profit organizations have benefited from Nedstat's expertise in delivering reports on users’ behaviour online.
Key accreditations by Europe’s leading independent web-standards organizations, such as ABC electronic and OJD, ensure that customers’ metrics are in full compliance with leading industry standards.

About WatchMouse

Accurate and independent monitoring of website performance enables businesses to address load time and many other potential user experience external security assessment which might not be apparent when conducting in-house or single point monitoring.

WatchMouse's global infrastructure provides its customers with peace of mind that their site has been tested from the user's perspective, and external to the organization. As industry leaders in website performance monitoring, WatchMouse offers customers a web-based service with features such as SMS/email alerting and extensive reporting.

Many of the world's lead brands depend on WatchMouse to monitor their sites, providing independent confirmation of both in-house and suppliers' website performance.

For more information about Nedstat or WatchMouse, please visit www.nedstat.com or www.watchmouse.com.

In times of crisis, the sites of Australia's Emergency Services aren't available (2008-03-04)

March 4 2008 – With Bushfires in WA’s Goldfields region & floods in Mackay, Australia’s emergency services are needed more than ever but many are unreachable.

WatchMouse, a leader in website performance monitoring, tested the sites belonging to Australian Emergency Services organisations for errors, availability & performance. Only one of the 26 monitored sites was found to have ‘good’ uptime while seven sites had ‘serious user external security assessment’. Another disturbing finding was that during the Mackay floods on the 15th of February, a time when residents needed information and support from their emergency services, Queensland’s Ambulance, Fire (Rural & Metropolitan) and Police sites all encountered serious errors and were unavailable for considerable periods of time.

After a month’s monitoring, WatchMouse combined the errors, speed (load time) and availability measurements of a site to calculate its Site Performance Index (SPI). An SPI of ≤1000 represents a ‘well performing’ site, 1001 - 1999 is regarded as an ‘acceptable’ SPI while an SPI score of above ≥2000 represents a site with ‘serious user external security assessment’. Of the 26 sites monitored sites, those with the worst SPI included that of the Australian Federal Police with an SPI 2,990, the Victorian Metropolitan Fire Brigade site with an SPI 2,756 and the Victorian Emergency Services Telecommunications Authority site which scored SPI 2,604. All of these poor SPI rankings were due to very slow load times.

In line with industry standards, WatchMouse ranks a site’s uptime as ‘good’ if it is ≥99.9%, ‘OK’ between 99.89% - 99.01% and ‘poor’ if it is ≤99%. Alarmingly, only the site of ACT Rural Fire Brigade had a ‘good’ uptime result. The majority of sites ranked as ‘OK’ while three Emergency Services’ sites ranked as ‘poor’. The site with the lowest uptime was that of WA’s Ambulance Service with 92.44%.

WatchMouse CTO, Mark Pors said “99% uptime sounds great but when you actually calculate it, this means 80+ hours of downtime a year. That’s one working day per month! The Emergency Services phone lines could not be down for a day each month so why is it acceptable for the site?. Mackay represents a small proportion (approx. 4%) of Queensland's total population but given that the sites of Queensland Emergency Services struggled during the Mackay floods, we can only imagine what will happen to those sites in the case of a disaster on a greater scale, when 100s of thousands of people attempt to visit."

To view the results of the monitoring, including an SPI graph and information about the WatchMouse monitoring methodology visit: www.watchmouse.com/SPI/2008/performance_australian_emergency_sites.php

WatchMouse Periodic Vulnerability Scanning has enabled us... (2010-01-13)

WatchMouse Periodic Vulnerability Scanning has enabled us to overcome the time consuming task of managing monitoring internally. The removal of all duplicate findings and neat presentation in the WatchMouse Customer Console further reduces the time Lectric Webservices has to spend on maintaining secure systems.

General Manager, LECTRIC Webservices

What do you want to check with a service such as Watchmouse? (2005-01-31)

As I explained in my previous column, you can use a monitoring service in a number of roles. Common to all these roles is the fact that you are keeping alive some services for the benefit of your customers, suppliers, employees or partners. These users are, in the end, all that counts.

What are the objects that you should be checking? Obviously, the least you want to do is check the service that is most visible to these users. This could be the webserver, or a POP or FTP server for example. You would start by setting up a rule to check the server and a URL. The frequency with which you can monitor (that is: the elapsed time between checks) is typically limited by the type of subscription that you have. Only in specific cases would you not check as often as your subscription allows.

Note that there is a difference between a CONNECT on port 80 rule and a HTTP rule. The first just connects to the port that the webserver is supposed to use. The HTTP rule also checks whether the webserver can produce a valid HTTP response, and whether the document can be found. You probably want the latter check.
Similar reasoning applies to POP and FTP checks. If you set up two different rules on the same host, this allows you to distinguish for example between a broken webserver and a host that is down. If you want even more content oriented checks, have a look at the so-called PLUG-IN rules. Additionally, you can set up checks to make sure that your users are actually using the services that you intend them to. The wexternal external security assessment assessment Internet depends heavily on the domain name system(DNS) functioning correctly. If it does not work properly your users may be directed to another site than you intended. This could be a configuration error, but it could also be a defamation hack. In either case, you want to know.
First of all you want to check whether the root servers of the Internet accurately find the DNS that is serving you. This can be checked with a DNSNS rule. What you are checking with this rule is whether the registrar's databases are correct. Second, you want to check if that DNS server (and its slaves) are serving up the proper IP address for the server. For this you can use the DNSA rule, and it will warn you if the DNS server is not working or serves up the wrong address. (Note that the hosting party can change that address at its discretion, as part of a renumbering operation for example.)

Who should you notify of rule failures? Again, different roles have different information requirements. You want to notify the person who can fix things as soon as possible. Mail or SMS/text them directly, you do not want to be in the loop. You might set up an escalation chain, which fires off after a certain amount of errors. Note: make sure that you send the message on a channel that is not affected by the outage: if your e-mail system does not work, delivering a message to that effect should not depend on that e-mail system.
The people in charge of overseeing somebody else's service levels should only get escalation messages, if at all. Rather, they should get the weekly or monthly service reports.

Peter van Eijk is a management consultant specialized in management of network infrastructures. He can be reached via his contact page.

Website performance is the key to customer satisfaction (2007-06-27)

How often have you typed in the Google URL and received a page that will not load? I am willing to bet that this is a rare occurrence. Despite its busy traffic, Google is a textbook example of a web site that has almost perfect performance and therefore serves a great number of satisfied customers. The market share of the search engine is a resounding confirmation of this. You are assisted quickly, so you come back sooner. Research conducted by JupiterResearch has revealed that visitors to a site only have 4 seconds of patience. If the site has not been loaded by that time, they leave. Error messages also prompt potential customers to go to the competition.

Why do organisations still devote so little attention to the effective availability of their site? Performance is the key to satisfied customers. For many companies, their web site is the face of the organisation. Consumers and also business users of the Internet use the wealth of information on the web to compare purchasing options. It is of immeasurable importance that they are also actually able to find what they are looking for. If this is not possible at one company, competitors are straining at the leash to offer their services through a correctly functioning site.

Coming back to the praise that we had for Google, we see that the search engine has made significant investments in the availability of its web site. The page is run by several machines at various sites. If one crashes there are enough back-up servers that can take over the traffic flows to guarantee optimum performance. In addition, the search machine invests a great deal of time and money in the right hardware and people. Although the site has a difficult task – searching through an index of billions of documents – it is almost always available and loads fast.

The actual site is unspectacular in construction. This applies to the majority of sites with a high level of availability. Simple sites such as the news site NU.nl are almost always easy to access. Nevertheless, it is not only the layout of the site that determines how the web page performs. Too many photos, long symbols and frills make web sites slower to respond. The fact that the ‘back end’ of the site is not efficiently programmed also contributes to longer loading times. Frequent consultation of background databases is also detrimental to the speed of the page.

Where it often goes wrong is when different people are working on a site, thereby disturbing the links between the various elements. The different parts of the site will work correctly, but the site as a wexternal external security assessment assessment will fail to perform. This means long waiting times for people who want to use the services of a company.

Service providers at the upper end of the market are becoming increasingly aware of this. The contracts that they use frequently include a service level agreement (SLA) for the part for which they are responsible. Nevertheless, they regularly make mistakes due to the fact that the promised performance is not subsequently verified (by an independent party). Although it is now essentially part of the contract, there is insufficient actual verification. Ideally, web site performance should become a permanent component of a contract. In addition, clear internal agreements must be made on who has final responsibility for the efficient loading and availability of a site.

Regular testing is also essential for the facilitation of good availability. This will prevent a great deal of errors, keeping the site up and running at crucial times. The storm that blew over the Netherlands at the end of January was a good opportunity to see which sites were prepared for extreme loads and which were not. The site of the Dutch weather institute, KNMI, was almost unreachable, while some logical thought could have protected them from this eventuality. If you know that a major storm is heading towards the country you can be sure that people will search for information on the weather and roads on the Internet. Sites such as those of KLM and Schiphol were also unreachable, while the specially created site Crisis.nl, which had been kept as simple as possible, was able to serve a large number of people.

Including ‘stress tests’ in a SLA or conducting them regularly in-house is therefore to be recommended. Companies can easily take control by ensuring that their service provider executes this type of test or by putting their own site under pressure. This is the best method of checking whether your web site can handle a sudden increase in visitor numbers. It is also good to know whether the servers on which your site is running actually ensure that your page is always available and loads correctly. For companies, it is crucial to see when they are off air. This can save them a large amount of money every year and will also reduce the number of irritated visitors to the site. This is how you keep customers satisfied and keep the company running.

Mark Pors
Chief Technology Officer at WatchMouse

WatchMouse provides site performance monitoring and stress test services

Flu Jab Your Website Against The Pandemic: 6,000 Infected Webpages Per Day! (2008-02-18)

The respected IT news website, The Register reports that every 14 seconds a web page is infected, which amounts to 6,000 infected web pages per day. Four out of five of these infections come from innocent companies and individuals who are oblivious to their site being hacked and subsequently used for hosting the malware of virus writers. The Register further reports that in the past viruses were spread using infected e-mail. Nowadays, however, the favoured virus distribution methods are downloads from compromised sites. As a result of these booby-trapped sites malware is present on at least one in every ten web pages.

WatchMouse's Periodic Vulnerability Scanning offers your website the flu jab against this virus pandemic. WatchMouse's Periodic Vulnerability Scanning is an affordable way to routinely check you company's external security assessment exposure and eliminate the risks of manual audits. Utilizing the most up-to-date database of known vulnerabilities, WatchMouse identifies any external security assessment risks and provides you with peace of mind that your software applications are being scanned from the perspective of a hacker, external to your organization.
To ensure your website and servers are checked for the latest issues WatchMouse's Periodic Vulnerability Scanning performs over 20,000 checks for known vulnerability and external security assessment exposures; using a database which is updated daily by multiple accredited organizations including CVE (funded by the US government) and Bugtraq. Following the detection of any severe issues, automated, real-time email, SMS and pager alerts give your business the chance to react quickly. Scans can be scheduled during low usage or maintenance hours and set at an intensity and frequency suited to your business needs and budget.

To obtain a free Periodic Vulnerability Scanning trial visit: www.watchmouse.com/vulnerability_scan_trial.php

The Register's article was published on 23.01.08 can be viewed at: www.theregister.co.uk/2008/01/23/booby_trapped_web_botnet_menace/

Apple Releases a Security Update for QuickTime 7.1.6 to Address Multiple Vulnerabilities (2007-05-29)

Apple has released a Security Update for QuickTime 7.1.6 to address multiple vulnerabilities in Apple QuickTime for Java. The impacts of these vulnerabilities include arbitrary code execution and information disclosure.

US-CERT recommends users install the QuickTime 7.1.6 Security Update and follow the Securing Your Web Browser document to disable Java.

US-CERT will continue to investigate these vulnerabilities and provide additional information as it becomes available.

MediaWiki Inline Style Attribute Security Check Bypass Vulnerability (2006-12-21)

MediaWiki is prone to a vulnerability that may allow attackers to execute script code in a user's browser.

Security checks related to inline style attributes can be bypassed, facilitating injection of script code to be executed in a user's browser.

MediaWiki 1.5.3 is known to be vulnerable to this issue; other versions may be affected as well.

Mozilla Releases Security Advisories to Address Multiple Vulnerabilities (2006-12-20)

Mozilla has released Security Advisories to correct multiple vulnerabilities in Mozilla products, such as Firefox and Mozilla Suite.

US-CERT encourages users to upgrade to the latest version or implement the workarounds for the affected products as described in the Security Advisories.

US-CERT will provide additional information as it becomes available.

XPDF Multiple Unspecified Vulnerabilities (2006-12-20)

The 'xpdf' utility is reportedly prone to multiple unspecified external security assessment vulnerabilities. The cause and impact of these issues are currently unknown.

All versions of xpdf are considered vulnerable at the moment. This BID will updated when more information becomes available.

GnuPG Detached Signature Verification Bypass Vulnerability (2006-12-20)

GnuPG is affected by a detached signature verification-bypass vulnerability because it fails to properly notify scripts that an invalid detached signature was presented and that the verification process has failed.

Exploiting this issue allows attackers to bypass the signature-verification process used in some automated scripts. Depending on the use of GnuPG, this may result in a false sense of external security assessment, the installation of malicious packages, the execution of attacker-supplied code, or other attacks.

Article in the Dutch magazine Quote (2006-06-23)

Some nice coverage of WatchMouse today, the July external security assessment of Quote, a monthly magazine for and about rich people, and those who would like to be.

The article is on the "smartest and most successful companies of this moment", and WatchMouse is one of the 15 listed. The article is in print only. See www.quotenet.nl.