Licenses for Edgescan Solutions
The Platform that gives you continuous security testing, validated risk and proven exploits that will 100% improve your exposure management program.
Unauthenticated DAST
Edgescan
Essentials
Authenticated DAST
Edgescan
Professional
PTaaS
Edgescan
Advanced
Network Vulnerability Management
Edgescan
Host/Server
MAST
Mobile Application Security Testing
Unauthenticated DAST
Edgescan
Essentials
Authenticated DAST
Edgescan
Professional
PTaaS
Edgescan
Advanced
Network Vulnerability Management
Edgescan
Host/Server
MAST
Mobile Application Security Testing
- 100% vulnerability validation – no false positives
- Unlimited automated assessments
(network scans and DAST (Application and/or API)) - Unlimited retesting of vulnerabilities
- Expert remediation guidance
- Premium support from FTE security (OSCP/CREST) experts
- Prebuilt and custom RESTful API Integrations
- Unlimited role-based user accounts
- Unlimited, on-demand, customized reporting CISA KEV and EPSS correlation of applicable vulnerabilities
Additional Services and Add-ons
Attack Surface Management (ASM)
Discovery of all internet-facing assets associated to a domain, and continuous monitoring of defined external IP range(s)
Internet discovery for a primary domain including, but not limited to, subdomains, internet records, registrants, and services. Continuously assesses and alerts users about network changes and APIs discovered in their defined external attack surface.
PCI ASV
Payment Card Industry-Approved Scanning Vendor Service
Approved Scanning Vendor service to satisfy PCI-DSS compliance needs pertaining to vulnerability scanning, penetration testing, and reporting.
24x7x365 Support
If access to 24/7 emergency escalations or premium support is required outside of traditional business hours, Edgescan can accommodate.
Technical Account Manager (TAM)
Dedicated account concierge who assists in achieving operational readiness across the enterprise. Edgescan is easy to set up and maintain out of the box; however, a Technical Account Manager is often recommended for teams that need to improve their security posture quickly, are going through a digital transformation effort, are short-staffed, or have particularly complex environments.
Attack Surface Management (ASM)
Discovery of all internet-facing assets associated to a domain, and continuous monitoring of defined external IP range(s)
Internet discovery for a primary domain including, but not limited to, subdomains, internet records, registrants, and services. Continuously assesses and alerts users about network changes and APIs discovered in their defined external attack surface.
PCI ASV
Payment Card Industry-Approved Scanning Vendor Service
Approved Scanning Vendor service to satisfy PCI-DSS compliance needs pertaining to vulnerability scanning, penetration testing, and reporting.
24x7x365 Support
If access to 24/7 emergency escalations or premium support is required outside of traditional business hours, Edgescan can accommodate.
Technical Account Manager (TAM)
Dedicated account concierge who assists in achieving operational readiness across the enterprise. Edgescan is easy to set up and maintain out of the box; however, a Technical Account Manager is often recommended for teams that need to improve their security posture quickly, are going through a digital transformation effort, are short-staffed, or have particularly complex environments.
All Edgescan licenses include continuous vulnerability assessment with unlimited automated scans, risk prioritization, validated results, access to our analytics dashboard, and remediation guidance. Manual penetration testing, mobile application assessments, and authenticated testing can be added based on your risk tolerance and compliance needs.
Pricing adjusts dynamically with the scope of coverage—applications, APIs, and IPs—and the level of testing rigor required. Volume discounts and multi-year pricing options are available. For a tailored quote or to explore the right configuration for your organization, please contact our team.
Types of Assets Discovered and Protected by the Edgescan Platform
Application Examples
Network Asset Examples
Integrations
All tiers of Edgescan come with our full suite of integrations, click here to review the list.
Click HereContextualized
Risk Scoring
Risk prioritization with traditional and proprietary (EXF) scoring systems.
CLICK HERECertified Security Professionals
Edgescan Security Experts (OSCP/CREST) are FTEs able to provide consultancy-grade penetration tests and Business Logic Assessments (BLAs) (PTaaS) to critical assets.
CLICK HEREContact us for more information on how Edgescan can help secure your business.
Vulnerabilities Discovered by Edgescan
- All OWASP Top 10 vulnerabilities
- Application framework – known vulnerabilities (spring / struts / zend/ django/ .net, etc.)
- Autocomplete attribute
- Buffer overflow
- Content spoofing / HTML hacking
- Cookie access control
- Cross site scripting (XSS) –reflected / stored
- Data / information leakage
- Directory indexing
- DOM XSS
- File path traversal
- HTTP caching control
- HTTP header injection
- HTTP only session cookie
- HTTP response smuggling
- HTTP response splitting / pollution
- Improper input handling
- Improper output encoding / content type encoding
- Improper file system access control
- Insufficient SSL / TLS / transport layer protection
- Integer overflows
- LDAP injection
- OS command injection
- Persistent session cookie
- Remote file inclusion (RFI)
- SANS Top 25 Software Errors
- Server-side injection
- SQL injection: error based, time based, Boolean conditional, MySQL, MSSQL, Oracle, etc.
- Unsecured session cookie
- URL redirect security
- XML attribute security, XML external entities
- XML injection and schema security
- XPath injection