Lynis VS Detectify

• Comprehensive Security Auditing
  Lynis provides a thorough audit of Unix-based systems, helping to identify vulnerabilities, misconfigurations, and compliance issues.
• Open Source
  As an open-source tool, Lynis offers transparency, community support, and the ability to customize and extend functionality according to specific needs.
• Ease of Use
  Lynis is relatively easy to install and run, offering a straightforward command-line interface that doesn't require extensive configuration.
• Regular Updates
  Lynis is frequently updated to cover the latest security guidelines and standards, ensuring that users have access to current best practices.
• No Agents Required
  Lynis operates without the need for agent installation on the systems being audited, simplifying deployment and maintenance.

Possible disadvantages

• Unix-based Limitations
  Lynis is primarily designed for Unix and Unix-like systems, which limits its applicability for Windows environments.
• Technical Knowledge Required
  Users need a certain level of technical expertise to interpret the results and implement recommended changes effectively.
• Static Analysis
  Lynis focuses mainly on static analysis and configuration checks, which might miss dynamic behavior vulnerabilities detectable through runtime analysis.
• No Real-time Monitoring
  Lynis does not provide real-time monitoring capabilities, which means it should be supplemented with other tools for continuous security oversight.
• Manual Interventions Needed
  The tool may not automatically remediate issues, requiring manual intervention to address identified vulnerabilities and weaknesses.

• Comprehensive Security Analysis
  Detectify offers a wide range of security scanning features that allow users to identify vulnerabilities in their web applications thoroughly.
• Automated Scanning
  Detectify automates the vulnerability scanning process, reducing the need for manual intervention and allowing for more efficient security management.
• Regular Updates
  The platform is continuously updated with the latest security vulnerabilities, ensuring that users are protected against emerging threats.
• Easy Integration
  Detectify can be easily integrated into existing workflows and tools, which makes it convenient for teams to incorporate it into their development pipelines.
• User-friendly Interface
  The platform is designed with a user-friendly interface that makes it accessible for users with varying levels of technical expertise.
• Detailed Reports
  Detectify provides detailed reports on vulnerabilities that include descriptions, risk levels, and remediation steps to help users address issues efficiently.

Possible disadvantages

• Cost
  For small businesses or individual developers, the cost of using Detectify may be prohibitive compared to other tools available on the market.
• Limited Customization
  Although Detectify provides comprehensive scanning features, some users may find the customization options for scanning and reporting to be limited.
• False Positives
  As with many automated scanning tools, Detectify may produce false positives, which can require additional time and resources to verify and resolve.
• Depends on External Knowledge Base
  Detectify relies on its external database for identifying vulnerabilities. This means any delays or issues in updates might impact the timely identification of new threats.
• Network Scan Limitations
  Detectify focuses primarily on web application security, which may not fully address network-level vulnerabilities or provide holistic infrastructure security.

How to install and run the Lynis - Security auditing tool for Linux (Tutorial 2020 InfoSec Pat)

More videos

Detectify Crowdsource | Meet the Hacker-Gerben Janssen van Doorn

More videos

• Homelab security on 512 MB: warden scores my logs and asks before it bans anything

  Hardening and drift. Lynis scores each box, and a file integrity check flags changes to things like sshd_config, cron and systemd units. - Source: dev.to / 27 days ago

• Keeping Your Mac Dev Environment From Rotting

  For a full CIS Benchmark audit, use Mergen (85 controls with auto-fix) or lynis:. - Source: dev.to / 4 months ago

• Who does check linux distros of malware - open source

  Linux has (free) tools to improve security and detect/remove malware: Lynis,Chkrootkit,Rkhunter,ClamAV,Vuls,LMD,radare2,Yara,ntopng,maltrail,Snort,Suricata... Source: almost 3 years ago

View more

• What are the actual security implications of port forwarding?

  Detectify once made an offer of making free scans which I took them up on. There are plenty of free Content Security Policy (CSP) and other vulnerability checkers around such as Observatory or Pentest. Shields UP!! Will identify which... Source: almost 3 years ago

• Ask HN: Who is hiring? (February 2022)

  Detectify | Community Manager, Crowdsource | REMOTE (Offices in Boston, US & Stockholm, Sweden. We help with relocation if wanted) https://detectify.com/ We are a cyber security company in the industry, and more specifically the EASM... - Source: Hacker News / almost 5 years ago

• DAST in Gitlab

  A concept-level idea would be this: 1) For your staging/UAT environment pipeline stages, add a "DAST scan" step, eg. With Detectify (which also has an API accommodating this need) 2) I'd assume, independently from the DAST scan, you... Source: over 5 years ago

View more