BI.ZONE offers a new approach to protecting external IT perimeters

BI.ZONE has launched a Continuous Penetration Testing (CPT) service meant to drastically improve the clients’ defense against external cyberattacks

October 29, 2019

Penetration testing has been an important cybersecurity tool for a long time. Using an array of different methods, experts imitate the behavior of adversaries who try to attack the organization. This way, most of the vulnerabilities in a client’s cyber defense become apparent. Traditionally, penetration testing that reveals most flaws is conducted once a year or once a quarter, but a lot of changes can happen between tests. Sometimes, they influence cybersecurity in unexpected ways and are uncovered only during the next testing session. To solve this problem, BI.ZONE has developed a service that uses a new approach to protecting external IT perimeters. It automates many tasks, and a client’s cybersecurity is constantly checked for integrity. This allows us to find and fix new vulnerabilities in a swift manner. CPT also includes expert support from BI.ZONE’s analysts and a suite of optional services.

Even though the methods of building external IT infrastructure have changed a lot in the last few years, its protection remains one of the cornerstones of any organization’s online security. We offer a new multilevel approach to defense from external attacks. As a part of this service, we have automated tasks that previously required a whole team of experts to be formed. This reduces costs for our clients, and security flaws get eliminated faster due to constant perimeter control. It should also be noted that when a company’s infrastructure changes, there is no need to repeat a traditional penetration test

Evgeny Voloshin

BI.ZONE CSO

BI.ZONE’s data shows that Russian companies’ employees regularly open emails that masquerade as correspondence from colleagues and partners, but in reality contain malware. Such letters are getting harder to distinguish from actual mail with each passing year, and now 3 out of 10 employees are vulnerable to phishing. To better teach the customers’ staff about cyber threats and evaluate their security teams’ effectiveness, BI.ZONE’s experts recommend conducting simulations of phishing attempts and targeted hacker attacks, which are available in CPT as an optional automated feature.

External IT infrastructure security can also be improved by another optional feature of CPT—automated load testing, during which a controlled external attack is performed. Its aim is to overload the target application and prevent it from working correctly. This allows one to identify the weakest links in the application’s architecture and ensure that company’s services will be available in case of a real attack.