Yeqela kokuqukethwe okuyinhloko
BilgeQor

Web & App Security Review

Emaqenjini aseNingizimu Afrika, umongo ovunyelwe wokuphepha okubhekelela i-POPIA nokulungela ukubhekana nezingozi zedijithali ugcina i-Web & App Security Review igxile ezikhaleni ezibalulekile ezibhalwe phansi naseziqondisweni ezibhaliwe zokuzilungisa. Ihlola izingxenye okuvunyelwene ngazo zezinhlelo zokusebenza zewebhu, ze-API noma zamaselula, bese inikeza okuphawuliwe okubhalwe phansi okuhlelwe ngokobukhulu bezinkinga, kanye neziqondiso zokuzilungisa ngokulandelana kokubaluleka. Umsebenzi uhlala ngaphakathi kobubanzi okuvunyelwene ngabo futhi awunikezi isitifiketi sokuthobela imithetho, awukhiphi imvume, futhi awuqinisekisi umphumela.

Kusukela R91 000,00 ZAR

Okolwazi

Ububanzi bokugcina bomsebenzi, noma yiziphi izintela ezisebenzayo, izindleko zabantu besithathu kanye nemigomo yezentengiselwano kuqinisekiswa esiphakamisweni esibhaliwe. Ukuqedela ukuthenga nokukhokha akutholakali.

Indlela Esiletha Ngayo Umsebenzi

Kuhlinzekwa ngenqubo yokubuyekeza eholwa ochwepheshe abaphezulu. Okutholakele, izilinganiso zobunzima kanye nezinto eziza kuqala ekulungiseni kuhlinzekwa ngokubhaliwe ngenqubo ebeka ubumfihlo kuqala. Lokhu kubuyekeza akuhlinzeki ngesitifiketi, ukugunyazwa kokuhambisana nezimfuneko noma isiqinisekiso sokutholwa kobuthakathaka bokuphepha.

Ifanele uma

  • ✓Unezinsiza ze-web noma zamaselula ezisetshenziswa ngokoqobo ezidinga ukubhalwa kwalokho okuqashelwe ngokuphathelene nokuphepha kwazo
  • ✓Udinga okutholakele okuhlelwe ngokubaluleka ukuze kusekele izingxoxo namakhasimende, zokuthenga, noma zokuphatha
  • ✓Ulungiselela ukuhlolwa okujulile, ukuqiniswa kokuphepha, noma umsebenzi wokulungela ukuthobela izimfuneko
  • ✓Ufuna isisekelo esibhaliwe ngaphambi kokunquma ngezinyathelo ezilandelayo zokuphepha

Akufaneleki uma

  • –Udinga ukuthi izinyathelo zokulungisa izinkinga zenziwe ngokushesha kunokuba kwenziwe ukuhlola.
  • –Udinga ukuqapha kwe-24/7, izinsizakalo ze-SOC, noma izinsizakalo ze-MDR
  • –Udinga isitifiketi, ukuvunywa kokuthobela imithetho, noma umbono osemthethweni wokucwaningwa kwamabhuku
  • –Ulindele isiqinisekiso sokuthi zonke izinkinga zokuphepha zizoqedwa

Ifanele kakhulu

  • Ulungiselela umkhiqizo wewebhu, osekelwa yi-API noma wamadivayisi eselula ukuba wethulwe, kukhishwe inguqulo enkulu yawo noma ubuyekezwe ngabantu bangaphandle
  • Uphatha izinkokhelo, idatha yomuntu siqu, ukuqinisekiswa kobunikazi noma ezinye izinqubo zomsebenzi zedijithali ezibucayi
  • Udinga ukubuyekezwa okuzimele kokuphepha kohlelo lokusebenza ngaphambi kokuthengwa kwempahla, ukubuyekezwa kwamakhasimende noma ukwanda
  • Udinga okutholakele ngokuphepha okubhalwe phansi futhi kwahlelwa ngokubaluleka, okuphathelene nobubanzi bohlelo lokusebenza okuvunyelwene ngabo

Lokho oyokuthola

Ukuhlolwa okubhaliwe kokuphepha kwezinhlelo zokusebenza okufanele imingcele yomsebenzi evunyelwene ngayo ye-web, ye-API noma yezinhlelo zokusebenza zamaselula
Irejista yokutholakele okuhlukaniswe ngokwamazinga obucayi, enezinkomba zobufakazi
Okuphawuliwe mayelana nokuqinisekiswa kobunikazi, ukugunyazwa nokuphathwa kwedatha ebucayi
Okuphawuliwe ngokuphepha kwe-API noma kokuhlanganiswa kwezinhlelo lapho lokhu kufakwe ebubanzini bomsebenzi okuvunyelwene ngabo
Uhlelo lwezinyathelo zokulungisa ezihlelwe ngokubaluleka
Isiphumo sokuqinisekisa / sokuhlola kabusha uma sihlanganiswe ezingeni elikhethiwe

Ngemva Kokucela Le Service

Lapho ukhetha izinga lephakethe, uthumela isicelo. Sibuyekeza ububanzi ngokubhaliwe ngaphambi kwanoma yisiphi isinyathelo sokuhweba esilandelayo. Leli khasi alitholi inkokhelo, alivuli ukuqoqwa kolwazi lokuqala, futhi aliqali umsebenzi.

Amanani obubanzi bomsebenzi anikezwa ngenjongo yokwazisa

Starter

R91 000,00 ZAR

Okolwazi

Ingxenye eyodwa yohlelo lokusebenza okuvunyelwene ngayo, njengohlelo lokusebenza lwewebhu, ukugeleza komkhiqizo okuxhunywe ku-API noma ipulatifomu eyodwa yeselula. Ukubuyekezwa kokuphepha okugxile kuleyo ngxenye kanye neziqondiso zokulungisa izinkinga ngokulandelana kokubaluleka kwazo.

Funa isiphakamiso esibhaliwe
Okudume Kakhulu

Standard

R172 000,00 ZAR

Okolwazi

Ububanzi bokuhlolwa kohlelo lokusebenza olulodwa oluyinkimbinkimbi noma ukugeleza okuvunyelwene ngakho kwezinhlelo zokusebenza ezixhunyiwe, njengohlelo lwewebhu noma lweselula oluhambisana nokubuyekezwa kwe-API elusekelayo. Ukuhlaziywa kokuphepha okujulile, isiqondiso sokulungisa kanye nokuhlolwa kabusha okukodwa.

Funa isiphakamiso esibhaliwe

Premium

R346 000,00 ZAR

Okolwazi

Ububanzi bohlelo lokusebenza okuvunyelwene ngabo obubanzi kakhulu, obuhlanganisa izingxenye eziningi ezixhunyiwe noma izinqubo eziyinkimbinkimbi zomkhiqizo. Ukubuyekeza okunwetshiwe, uhlelo lwezinyathelo ezizolandela oluhlelwe ngokubaluleka kanye nomjikelezo wesibili wokuqinisekisa.

Funa isiphakamiso esibhaliwe

Izindawo Zokuhlola Ukungena Ezikhona

Ububanzi obufanele bokuhlola buqinisekiswa ngaphambi kokuba umsebenzi uqale. Ububanzi bokuhlola obugxile ezinhlelweni zokusebenza bungabuyekezwa ngaphakathi kwale nsizakalo uma kuvunyelwene ngakho ephaketheni elikhethiwe. Ingqalasizinda ebanzi nezindawo ezidinga ubuchwepheshe obukhethekile zidinga ukunqunywa kobubanzi, ukugunyazwa kanye nekhotheshini okuhlukile.

Ububanzi bezinhlelo zokusebenza ezimbozwa yilokhu kuhlolwa

Lobu bubanzi bomsebenzi obugxile ezinhlelweni zokusebenza bungahlolwa ngaphakathi kwale sevisi uma kuvunyelwene ngabo ezingeni lesevisi elikhethiwe futhi buqinisekiswe ngokubhala ngaphambi kokuba kuqale umsebenzi.

  • Ukuhlola Ukuphepha Kwezinhlelo Zokusebenza Zewebhu — Kuhlola izinhlelo zokusebenza zewebhu ezisetshenziswa amakhasimende ukuze kutholakale ubuthakathaka ekuqinisekiseni ubuwena, ezikhathini zokungena ohlelweni, kumafomu, ezindleleni zokulawula ukufinyelela, ekuphatheni idatha nasezindleleni ezivamile zokuhlasela izinhlelo zokusebenza.
  • Ukuhlola Ukuphepha kwe-API — Ngaphakathi kobubanzi bomsebenzi obuqinisekisiwe obugxile kuma-API, ukubuyekeza kungahlola i-REST, i-GraphQL, i-WebSocket nezindawo zokuxhumana phakathi kwezinsizakalo lapho zikhona, kuhlanganise nokuqinisekiswa kobunikazi, ukugunyazwa, izindlela zokusebenzisa kabi imithetho yokusebenza kwebhizinisi, ukukhawulelwa kwezinga lezicelo, imingcele yamathokheni nezikhathi zokuxhumana, ukuhlukaniswa kwezindawo zamakhasimende asebenzisa isistimu, ukuvezwa kwedatha, ukuziphatha kwezindawo zokuxhumana kanye nobungozi bokuhlanganisa amasistimu. Okutholakele okusekelwe ebufakazini kubekwa ngokulandelana kobucayi futhi kuhambisana nesiqondiso sokulungisa; noma yikuphi ukuhlolwa kabusha okufakiwe kukhawulelwe kokutholakele okulungisiwe okuvunyelwene ngakho, futhi ububanzi bomsebenzi wokusebenzisa izixazululo bunqunywa ngokwehlukile.
  • Ukuhlola Ukuphepha Kwezinhlelo Zokusebenza Zamaselula — Ihlola izingxenye okuvunyelwene ukuthi zihlolwe ezinhlelweni zokusebenza ze-iOS noma ze-Android, ukuphathwa kwedatha yohlelo lokusebenza, izinqubo zokuqinisekisa ubuwena, ukuxhumana ne-API nokuziphatha kohlelo lokusebenza okuphathelene nokuphepha.

Izinketho Zokuhlola Ezandisiwe — Ububanzi Bomsebenzi Buchazwa Ngokwehlukana

Lezi zindawo zitholakala kuphela ngemva kokuqinisekiswa okuhlukile kobubanzi bomsebenzi, imvume ebhaliwe nesilinganiso sentengo. Azifakwa ngokuzenzakalelayo kumanani amanje e-Starter, Standard noma Premium ale sevisi.

  • Ukuhlola Ukuphepha Kwezinhlelo Zokusebenza Zasedeskithophu — Ukubuyekezwa kohlelo lokusebenza lwedeskithophu oluvunyelwene ngalo indlela oluphatha ngayo okufakwayo komsebenzisi, lugcina idatha kudivayisi, luxhumana nezinsizakalo zangemuva futhi luvikela ukuhamba komsebenzi okubucayi uma selufakwe esiteshini sokusebenza.
  • Ukuhlola Ukuphepha Kwenethiwekhi Yangaphandle — Ukubuyekezwa kwezinhlelo ezibhekene ne-intanethi ngombono wangaphandle ukuze kutholakale izinsizakalo eziveziwe, izilungiselelo ezibuthaka nezindlela umuntu noma iqembu langaphandle elingazama ukuzisebenzisa ngokumelene nenhlangano.
  • Ukuphepha kwenethiwekhi yangaphakathi: ukuhlolwa — Ukuhlolwa kwemvelo yangaphakathi yenethiwekhi kusuka endaweni evunyelwe ngaphakathi kwenhlangano, ukubheka ukuthi amasistimu, ama-akhawunti nezinsizakalo zingase zisetshenziswe kanjani kabi uma umhlaseli efinyelela kunethiwekhi yangaphakathi.
  • Ukuhlola Ukuphepha Kwenethiwekhi Engenantambo — Ukubuyekezwa kwamanethiwekhi angenantambo namaphuzu okufinyelela okuvunyelwene ngawo — indlela abasebenzisi abaxhuma ngayo, indlela indawo yenethiwekhi engenantambo ehlukaniswe ngayo nezinhlelo ezibucayi, nokuthi izilungiselelo ezibuthakathaka zingasetshenziswa kabi kuphi.
  • Ukuphepha kwe-VoIP: ukuhlolwa — Ukubuyekezwa kwezingxenye zocingo ezidlulisa izwi nge-IP okuvunyelwene ngazo — ukuqondiswa kwezingcingo, ukuqinisekiswa kobunikazi, amasevisi avulekele ukufinyelelwa nezindlela zokusebenzisa kabi ezingathinta ubuqotho bezokuxhumana noma izindleko zezingcingo.

Ukwamukelwa Nguchwepheshe Kuphela

  • Ukuhlola Ukuphepha kwe-OT / SCADA / ICS — Kudinga ukwamukelwa kwezobuchwepheshe ngochwepheshe, imvume ebhaliwe, imikhawulo yokuphepha okuvunyelwene ngayo kanye nesilinganiso sentengo esihlukile ngaphambi kokuba noma yimuphi umsebenzi uqinisekiswe. Akwethulwa njengokutholakala ngokuzenzakalelayo ukuze kuthengwe ngokuqondile ku-inthanethi.

Alikho iphakethe elihlanganisa ngokuzenzakalelayo yonke imikhakha yokuhlola ebalwe ngenhla. Okuhloswe ukuhlolwa ekugcineni, izindawo zokusebenza, izidingo zokufinyelela, ukugunyazwa, imibandela yokuhlola kanye nanoma yiluphi usizo lokuhlola kabusha noma lokulungisa amaphutha kuqinisekiswa ngaphambi kokuba umsebenzi uqale.

  • Ukuqaliswa kokulungisa akufakiwe ngokuzenzakalelayo.
  • Ukuhlolwa okuphelele kokungena akufakiwe ngokuzenzakalelayo ngaphandle kokuthi kuvunyelwene ngokwahlukana.
  • Ukuhlolwa akunikezi isitifiketi sokuphepha.
  • Ukuhlola akuqinisekisi ukuthi bonke ubuthakathaka bokuphepha buzotholakala.
  • Ukuhlolwa kokumelana nokuhlasela kwe-DDoS, izivivinyo ze-Red Team nokuzingela izinsongo kuyimisebenzi ehlukene enemikhawulo echaziwe, esivele itholakala ngomzila wemisebenzi ekhethekile.

Kufakiwe

  • Indawo eyodwa yohlelo lokusebenza okuvunyelwene ngayo ye-Starter
  • Ukubuyekezwa okugxilile kobubanzi obuqinisekisiwe bohlelo lokusebenza lwewebhu, lwe-API noma lweselula
  • Ukubuyekezwa kokuqinisekiswa kobunikazi nokugunyazwa lapho kufanele khona
  • Ukubuyekezwa kokuphathwa kwedatha ebucayi lapho kunesidingo
  • Okuphawuliwe mayelana ne-API noma ukuhlanganiswa kwezinhlelo lapho lokhu kufakiwe ebubanzini bomsebenzi obuqinisekisiwe
  • Okutholakele okubhaliwe kanye neziqondiso zokulungisa ezihlelwe ngokubaluleka
  • Ukuhlolwa kabusha / ukuqinisekiswa okuhambisana nezinga lapho sekuvunyelwe

Okungafakiwe

  • Ukulungiswa kwekhodi okwenziwa ngokuqondile (kutholakala njengesevisi eyengeziwe)
  • Ukuhlolwa kokungena okugcwele (ububanzi obenzelwe izidingo ezithile)
  • Ukuqapha okuqhubekayo
  • Usizo lokuhambisa izinhlelo zokusebenza ezitolo zazo (bheka Amasevisi ezinhlelo zokusebenza)

Izengezo Ezikhona

  • +Indawo eyengeziwe yohlelo lokusebenza okuvunyelwene ngayo
  • +Ukubuyekezwa okunwetshiwe kwe-API noma kokuhlanganiswa
  • +Usizo lokulungisa izinkinga ngokusebenza ngqo
  • +Ukuqinisekisa okulandelayo okungaphezu kobubanzi bomsebenzi obufakwe esigabeni sesevisi

Indlela esebenza ngayo

1

Ukuthenga Nokuqoqwa Kwemininingwane

Ikhasimende liqinisekisa ububanzi okuvunyelwene ngabo bohlelo lokusebenza, indlela yokufinyelela egunyaziwe kanye nomongo wezobuchwepheshe ofanele.

2

Ukuhlola Ukuphepha

Ukubuyekeza kuhlola izingxenye zohlelo lokusebenza okuvunyelwene ukuthi zihlolwe kanye nokugeleza okuhlobene nokuphepha.

3

Umbiko & Ukuhlaziywa

Kulethwa umbiko obhaliwe walokho okutholakele kanye nezinto okufanele zibekwe phambili ekulungiseni izinkinga.

4

Ukudluliselwa Nokuqondiswa

Ukudluliselwa nokuqinisekiswa okufakiwe kwenziwa ngokuya ngezinga elikhethiwe.

Isikhathi: Kuqinisekiswa ngesikhathi sokwamukelwa kwesicelo ngokusekelwe emkhakheni womsebenzi nasezingeni lephakethe. Izikhathi ezivamile zokulethwa zinikezwa ngemva kokuphothulwa kwenqubo yokwamukelwa kwesicelo.

Isibonelo senqubo

Isibonelo esivikela ubumfihlo sendlela ububanzi bomsebenzi wohlelo lokusebenza olulodwa lweselula obungabhalwa ngayo ngaphakathi kwale nkonzo, okuhlanganisa irejista yemiphumela ebhekisela ku-OWASP kanye nohlelo lokulungisa oluhlelwe ngokulandelana kokubaluleka.

Ububanzi bohlelo lokusebenza lweselula obuyisiboneloApplication Security Review — isibonelo sobubanzi bokubuyekeza uhlelo lokusebenza lweselulaIsakhiwo sesigaba se-Standard esiyisibonelo
Inselele

Isimo esiyisibonelo: uhlelo lokusebenza lweselula lulungiselela ukukhishwa kwangaphakathi kanye nokubuyekezwa kwezingozi. Ububanzi bomsebenzi kulesi sibonelo buhlanganisa indawo eyodwa yohlelo lokusebenza lweselula kanye nokubuyekezwa kwe-API okuyisekelayo, ukuze kuboniswe ukuthi kungabhalwa kanjani okuphawulwe ngokuqinisekiswa kobunikazi, ukugunyazwa kanye nokuphathwa kwedatha ebucayi.

Ububanzi bomsebenzi obusetshenzisiwe
  • Izinga le-Standard — ingxenye eyodwa okuvunyelwene ngayo yohlelo lokusebenza lweselula, kanye nokubuyekezwa kwe-API elusekelayo
  • Ukuphepha kuyinto okugxilwa kuyo ekubuyekezweni kwezindlela okuvunyelwene ngazo zokuqinisekisa ubunikazi nokuphatha idatha ebucayi
  • Okuphawuliwe okusekelayo mayelana ne-API nokuphepha kokuhlanganiswa ngaphakathi komkhakha oqinisekisiwe
  • Okutholakele okuhlelwe ngokubaluleka kanye nesiqondiso sokulungisa
  • Ukuhlola kabusha okukodwa okufakiwe kokutholakele okuvunyelwene ngakho nokulungisiwe
Umphumela

Lesi sibonelo sendlela yokusebenza sibonisa ukuthi okutholakele kungabhalwa kanjani ngokwamazinga obucayi, kanye nohlelo lokulungisa olubeka izinto ngokubaluleka kwazo nomphumela owodwa wokuqinisekisa okutholakele okuvunyelwene ngakho nokulungisiwe. Sibonisa ububanzi bomsebenzi obubodwa okungenzeka kuvunyelwane ngabo ngaphansi kwensizakalo ebanzi yokubuyekeza ukuphepha kwezinhlelo zokusebenza; ububanzi bomsebenzi, okutholakele nemiphumela kuyahlukahluka ngokomsebenzi ngamunye okuvunyelwene ngawo.

Ukubuka kuqala komphumela ozolethwa

Application Security Review — Irejista Yokutholakele (Isibonelo Sobubanzi Bomsebenzi Ezinhlelweni Zamadivayisi Eselula)

  • Isifinyezo sabaphathi sesimo sokuphepha kohlelo lokusebenza ngaphakathi komkhawulo ovunyelwene ngawo ophathelene namadivayisi eselula
  • Irejista yalokho okutholakele, okuhlukaniswe ngokwezinga lobucayi, enezinkomba ezifanele ze-OWASP zezinhlelo zeselula kulesi sibonelo esigxile ezinhlelweni zeselula
  • Okuphawuliwe ngokuphepha kwe-API esekelayo ngaphakathi kobubanzi bomsebenzi obuqinisekisiwe
  • Ukubuyekezwa kokuphathwa kwedatha ebucayi
  • Ukuhlaziywa kokuqinisekiswa kobunikazi nokugunyazwa
  • Uhlelo lokulungisa izinkinga oluhlelwe ngokubaluleka kwazo nomphumela wokuqinisekisa
Irejista Yokutholakele — Umugqa OyisiboneloOkutholakele 04 — [REDACTED ASSET]: i-token yeseshini engabethelwe endaweni yokugcina yasendaweni. Ubucayi: Buphezulu. Inkomba ye-OWASP yezinhlelo zokusebenza zamaselula isetshenziselwe lesi sibonelo esigxile ezinhlelweni zokusebenza zamaselula (M9 — Ukugcinwa Kwedatha Okungaphephile). Ukulungisa: thuthela endaweni yokugcina ephephile yenkundla. Status: Kusavuliwe.

Isakhiwo sedokhumenti esiyisibonelo. Uma umsebenzi usuqinisekisiwe, kunikezwa amadokhumenti afanele ububanzi bomsebenzi okuvunyelwene ngabo wohlelo lokusebenza lwewebhu, olusekelwa yi-API noma lomakhalekhukhwini.

Ukuphepha: umongo we-Security File

Indlela lo mphumela womsebenzi ongena ngayo eFayeleni elithi Ukuphepha

Lesi sibonelo somsebenzi olethwayo sibonisa uhlobo lobufakazi, izinto ezibekwe eqhulwini namanothi okulandelela angaba ngaphakathi kwe-BilgeQor Security File (Ukuphepha) esebenzisekayo ngemva kokudluliselwa.

Ifayela le-Ukuphepha liyithuluzi elisiza ekuthatheni izinqumo, hhayi isitifiketi, isinqumo sokuthobela izimfuneko, isiqinisekiso sokuphepha okuphelele, noma isilinganiso sokulahlekelwa kwenkampani ngayinye.

Bheka indlela yokulethwa
Qaphela:Isibonelo sendlela yokusebenza, hhayi ucwaningo lwecala leklayenti. Umsebenzi oqinisekisiwe ungahlanganisa umkhawulo okuvunyelwene ngawo wohlelo lwewebhu, olusekelwa yi-API noma lweselula. Umkhawulo womsebenzi, okutholakele nemiphumela kuyahlukahluka ngomsebenzi ngamunye.

Imibuzo Evame Ukubuzwa

Ukulungele ukuqala?

Khetha izinga lephakethe noma ukhulume nathi ngobubanzi bomsebenzi obenzelwe izidingo zakho