Shodan VS WPScans.com

Transform OSINT sources such as shodan, bgpview & urlscan into templates which you can use to query & store any and each of the API endpoints they provide. Source: 10 months ago

I'm a little surprised you're asking this but as you don't know - if you set the rulebase correctly, you won't get hammered by "public". A lot of people (of course not people here) don't do that which is why shodan.io is full of servers with SSH exposed to the world. Source: 10 months ago

Eh, request a full demo before signing anything. If they make you buy before you can try, move on. Just be advised that data they collect from your site may be used in a database that puts a target on your back. Similar to how shodan.io works. I would probe them on how they handle customer data and if data is shared, partitioned, or isolated to ensure safety from a platform leak. They want to be a security... Source: 10 months ago

My network is being hit by China and Russia many times per hour. Make sure your firewall is up-to-date and not have any services available on the Internet (WAN). Look at shodan.io which shows you _everything_ is searched on the Internet. Source: 11 months ago

In the cases of nginx or apache, I suspect they may be acting as proxies to some backend that also chooses not to send a reason phrase back. Searching for "Reason Phrase" yields a number of bug reports/frameworks that may omit it, and shodan.io shows apache tomcat and a few other services/software that omit the code as well. Source: 11 months ago

During insurance renewals with cyber cover but you could always provide the underwriters with a report from something as simple as https://wpsec.com/ which should reduce it. My concern with your model is that that you must keep in mind the state of the insurance market and always attempt to reduce your clients' overall cost for selecting your service. If your service is going to quote higher than insurance without... Source: about 1 year ago

I would suggest contacting GoDadd for help, but from what you've described sounds like WordPress itself maybe the issue. Could be installation issue like an insecure SQL connection or a vulnerability in a plugin / theme. Sounds like you've taken a good first action in cycling out passwords and logins, another step to take would be scan the site with a vulnerability scanner like https://wpsec.com/ and look into a... Source: over 2 years ago

Try running a scan on https://wpsec.com/ to see where you are on security. The report may give you some ammo when you talk to the boss. Source: over 2 years ago