Testing The Security Of A Site

[berridgeab]

Hi,

 

Does anyone know of anyone or any companies online that will test your site against a PHP attack then report any vunerabilitys back to you?

 

One of my sites run McAfee Secure which tests it against various attacks -

http://www.mcafeesecure.com/us/technology-scan.jsp

 

However this is all scripted by a computer and doesn't really apply to a real life individual determined to get access to your site.

 

Basically I want the equivalent of a Hacker that will attempt to gain access to my site in any way possible, and if they manage to gain access, come back and say, well your open to attacks at X, Y, and Z stage, you need to do this and this to protect against it.

 

Is anyone aware of any companies that will attempt to do this? Obviously I have done all security testing myself and im sure its pretty inaccessable, but i'd rather let a Pro have a go just to be sure.

 

[ignace]

You can hire a proffesional hacker they give you a detailed report afterwards. I know a few companies but these are based in Belgium and in Germany:

 

www.sektioneins.de

www.scanit.be

[berridgeab]

Yeah, the white hat type  , but you dont want to hire some random dude on an internet forum  , I was just wondering if anyone knows if there are any companies or sites that specialise with this type of request, I would have thought there would be with all the known vunerabilitys that a hacker can exploit with PHP driven sites. I've tested it to the limits myself and I can't find any holes, and the Mcafee Secure hasn't flagged up any errors so far.

 

 

[ignace]

I was just wondering if anyone knows if there are any companies or sites that specialise with this type of request

 

Like I said:

 

www.sektioneins.de

www.scanit.be

[berridgeab]

ah sorry missed the links  :-\