High-Tech Bridge, a leading European information security company specialising in penetration testing, has launched ImmuniWeb® Security Seal to distinguish websites and web applications that have been manually penetration tested in accordance to the industry standards and best-practice.

ImmuniWeb Security Seal enables organisations to differentiate their websites from competitors by demonstrating that they are committed to protecting their visitors’ data security, integrity, and privacy by performing industry-recognised penetration testing and managed vulnerability scanning through ImmuniWeb®. High-Tech Bridge’s on demand web security assessment service ImmuniWeb combines PCI-compliant manual penetration testing with managed vulnerability scanning performed in parallel.

The ImmuniWeb Security Seal confirms that website security and reliability has been thoroughly tested by experienced professionals for:

OWASP Top-10 vulnerabilities;

Complex web vulnerabilities that cannot be detected by automated scanning;

SSL/TLS vulnerabilities and weaknesses that may affect privacy and confidentiality.

Marsel Nizamutdinov, Chief Research Officer at High-Tech Bridge, says: “Many security seals existing today do not serve their main purpose – inspire trust and confidence. They mainly rely on inefficient automated vulnerability scanning that is incapable of detecting web security vulnerabilities and weaknesses in efficient and effective manner. ImmuniWeb Security Seal aims to change the situation by confirming that manual security testing has also been undertaken to detect many more vulnerabilities than traditional 
vulnerability scanning.”

The ImmuniWeb service has recently been nominated for the prestigious Info Security Products Global Excellence award in two categories: ‘Best Security Service’ and ‘Vulnerability Assessment, Remediation and Management’ among with such market leaders as F5 Networks, Veracode and Tripwire.

Frost & Sullivan has stated in a recent market research that “High-Tech Bridge offers the most complete hybrid-labelled offering available today, having realized the importance of a hybrid approach and having the SaaS model needed to facilitate integration of manual penetration testing expertise into its proprietary scanning technology.”

Ilia Kolochenko, CEO of High-Tech Bridge and chief architect of ImmuniWeb, concluded: “Despite the fact that absolute security cannot exist, a security seal assuring that a website’s security was manually tested in compliance with the industry best-practices significantly increases a website’s trustworthiness. Currently available security seal offerings on the market do not offer any sort of reliable manual penetration testing, leaving website owners to deal with their security problems internally. To fulfill the gap we are proud to launch ImmuniWeb® Security Seal aimed to bring trust to web application security.”

ImmuniWeb Security Seal will be available to all customers of ImmuniWeb SMB, Corporate, and Corporate Pro packages. The seal will not have an expiration date, as it will display the quarter and year of the last security assessment performed – this enables a company to decide how often they need to perform penetration testing, depending on their needs, web application size and complexity, and compliance requirements.