Unified IT and Web App Security: On-Prem Web App Scanning Integrated into Security Center
On-prem web app scanning is now available within Tenable Security Center, offering comprehensive exposure management with accurate analysis, OWASP Top 10 coverage and easy setup. Here’s what you need to know.
In the world of cybersecurity, staying ahead of threats is a constant challenge. Over the past decade, web application security has evolved and become significantly more complex. The proliferation of application programming interfaces (APIs) has introduced a host of vulnerabilities, making API security a pressing concern. The rise in supply chain attacks has added another layer of complexity, as web applications increasingly rely on third-party components. In addition, the open source ecosystem faces growing threats, requiring increased security measures.
According to a recent report from Verizon, web application attacks are involved in 25% of all breaches, making them the second most common attack pattern. This complexity makes it difficult for security teams to keep pace with evolving web app threats, especially when less-critical applications are often overlooked, leaving organizations vulnerable. Tenable recognizes these challenges and has unveiled a comprehensive solution that addresses them head-on, safeguarding critical assets and sensitive data.
Introducing on-prem web application scanning in Security Center
With Security Center’s latest 6.2 release, Tenable takes a significant step forward in bolstering your defenses against the modern attack surface by introducing web application security for customers who want their data managed onsite.
Until now, we’ve offered our web application scanning capabilities via a software-as-a-service (SaaS) model in Tenable Vulnerability Management. With this Security Center release, you get the flexibility to deploy your web application scanning through either a cloud-based or on-premises approach. The seamless integration of Web App Scanning into the Security Center UI fortifies your security posture by providing an on-prem approach to identifying and addressing vulnerabilities across both your network infrastructure and web applications. Security Center will now not only identify weaknesses in traditional IT assets, but extend its reach to the security of web applications.
Tenable Web App Scanning on-prem in Security Center is a game-changer for cybersecurity professionals. Here's why it matters:
Accurate and comprehensive vulnerability analysis: Tenable's Web App Scanning provides powerful vulnerability scanning for modern web applications. It minimizes false positives and negatives, ensuring that you understand the true risks associated with your web applications.
Full OWASP Top 10 coverage and beyond: Dynamic application security testing (DAST) identifies critical OWASP Top 10 Web Application Security Risks, such as cross-site scripting (XSS) and SQL injection. It also pinpoints vulnerable versions of third-party components, ensuring comprehensive vulnerability coverage.
Easy setup and rapid results: Predefined scan templates enable you to quickly identify common web application cyber hygiene issues related to SSL/TLS certificates and HTTP header misconfigurations. Setting up scans takes seconds, and the results are returned promptly.
Safe scanning for production environments: Web application scanning in Security Center ensures that your production web applications remain undisturbed while being thoroughly scanned for vulnerabilities.
Tenable's Web App Scanning empowers you to explore the next level of web application security within the Security Center UI. It allows you to stay ahead of evolving threats, secure your web applications effectively, and confidently defend your organization's digital assets. With real-time monitoring, comprehensive reporting and compliance alignment, this integrated solution equips security teams with the tools needed to safeguard critical assets and maintain a strong defense against modern adversaries.
There’s more in Security Center 6.2 beyond WAS
In addition to the integrated WAS capabilities, the Security Center 6.2 release also includes these additional features:
- Accessible asset lists from domain inventory: Save time by creating an asset list based on user selected assets. This list could be used to generate scans rather than manually creating scans.
- Algorithm updates to ACR/AES: Security Center Plus customers will benefit from algorithm updates by our data science team ensuring consistent ACR/AES risk calculations, whether data is processed on-premises or in the cloud. These updates will maintain accurate risk assessments, aiding informed security decisions. Customers will need to apply the 6.2 release update to benefit from these improvements.
- Improvements to Security Center patching: Now you’ll have the ability to see and apply any patches directly from the Software Updates tool, rather than requiring a reboot to the system, as well as seeing the status of available patches (i.e., applied, missing).
- Custom classification banner: Elevate your web app or exported reports with personalized headers and footers. Now, you have the power to define your own text and choose a custom color for your classification banners. This feature empowers customers who demand classification banners to tailor their messaging and design according to their unique needs and preferences.
Get ready to explore the next level of web application security on-prem within the Security Center UI. With Tenable Web App Scanning, you can stay ahead of evolving threats, secure your web applications effectively, and confidently defend your organization's digital assets. Upgrade to the latest version of Tenable Security Center and tap into the full potential of these features.
Want to learn what Tenable Web App Scanning in Security Center can do? Attend our upcoming customer update webinar on November 9 at 10 am PDT / 1 pm EDT for a look into what's new and coming soon in Tenable Security Center 6.2.
Learn more
Related Articles
Cybersecurity Snapshot: CISA Says Midnight Blizzard Swiped U.S. Gov’t Emails During Microsoft Hack, Tells Fed Agencies To Take Immediate Action
April 12, 2024Check out CISA’s urgent call for federal agencies to protect themselves from Midnight Blizzard’s breach of Microsoft corporate emails. Plus, a new survey shows cybersecurity pros are guardedly optimistic about AI. Meanwhile, SANS pinpoints the four trends CISOs absolutely must focus on this year. And the NSA is sharing best practices for data security. And much more!
Cybersecurity Snapshot: CSRB Calls Exchange Online Hack “Preventable,” While CISA, Others Warn About XZ Utils Backdoor Vulnerability
April 5, 2024Check out why the Cyber Safety Review Board has concluded that the Microsoft Exchange Online breach “should never have occurred.” Plus, warnings about the supply chain attack against the XZ Utils open source utility are flying. In addition, a report says ransomware attacks surged in February. And the U.S. government issues a comprehensive AI usage policy for federal agencies. And much more!
Cybersecurity Snapshot: U.S. Gov’t Unpacks AI Threat to Banks, as NCSC Urges OT Teams to Protect Cloud SCADA Systems
March 29, 2024Check out new guidance for banks on combating AI-boosted fraud. Plus, how to cut cyber risk when migrating SCADA systems to the cloud. Meanwhile, why CISA is fed up with SQLi flaws. And best practices to prevent and respond to DDoS attacks. And much more!
Tenable and Thales Collaborate to Provide Cyber Defense Simulations to Better Secure Operational Technology Environments
April 18, 2024The heart of the Welsh Valleys is home to the Thales Ebbw Vale campus, a world-class facility jointly funded by the Welsh government as part of its regeneration program for the region. At the core of the facility is the Cyber Range, a simulation and virtualization platform for training, testing, exercising and R&D. Tenable has joined the lineup of solutions used to run real world simulations in this controlled environment.
Oracle April 2024 Critical Patch Update Addresses 239 CVEs
April 17, 2024Oracle addresses 239 CVEs in its second quarterly update of 2024 with 441 patches, including 38 critical updates.
Strengthening the Nessus Software Supply Chain with SLSA
April 16, 2024You know Tenable as a cybersecurity industry leader whose world-class exposure management products are trusted by our approximately 43,000 customers, including about 60% of the Fortune 500. But sometimes we like to give you a peek behind the curtain to share how we protect our own house against cyberattacks – and that’s what this blog is about. Today we’re sharing our experience adopting the supply-chain security framework SLSA, with the hopes that the lessons we learned will be helpful to you.
- Cloud
- Integrations
- Web Application Scanning
- Cloud
- SecurityCenter