Christian

Release

App Detection Changes

With our january release we change the way applications will be detected on websites. That will lead to some new old alerts. But its worth, as the information will be more accurate and clear in the future.

forms

Preventing Cross-Site-Request-Forgery (CSRF ) Attacks

While CSRF Token work perfectly good in preventing CSRF attacks, the implementation of these tokens is not a pleasant work. With the Cookie attribute SameSite:strict, CSRF protection just works almost anywhere.

Digitale Sicherheit

KSV1870 veröffentlicht CyberRisk Rating

IT-Sicherheit, Datenschutz und digitale Resilienz von Unternehmen werden weltweit nach Richtlinien führender österreichischer Sicherheitsverantwortlicher bewertet.

alerts

Less is better (issue UX)

An article about issue notification from our compliance monitor (aka Krahken). From now on we generate less issues for more clarity.

feature

New Analysis: Legacy Certificates

Last year Google distrusted certificates of Symantec and its subsidiaries. We detect if you are using such certificates.

alerts

Announcing: Webhooks for MS Teams

We send notifications via webhooks to everyone who like, but now we also talk to MS Teams. Get nicely formatted alerts directly in your channel from Nimbusec.

discovery

Announcing: Security Header Ratings

Discovery got a new column in its report overview: Security Header Ratings

feature

Discover Tags & Labels

We just released tags to add additional information to monitored and discovered domains.

Redirect Analysis

Feature Friday: Redirects, Response Info

A while ago we implemented some cool new insights in our continuous website monitoring suite. You'll now see more about: RedirectsHTTP Response StatuscodeHTTP Response HeadersStarting off on the Settings page

discovery

Discovery Filter Smartness

Discovery just got a little easier to use with "smart" filters.

Release

September Releases (and before)

Hope we come back to some monthly or at least regularly product updates soon. Not that we weren't working during the last months since the post in may. But let's

blog

Welcome to the new Blog

Long story short: we switched to a new blogging platform named Ghost. Tech partThe setup is realized as Docker container for the main application with an mounted volume for the

Release

May of GDPR - Release Notes

Wow, topic of the month was clearly the general data protection regulation by the European union. But this post should be not one of them, although some commits have been

Malware

Feature February

February holds a lot of new features we implemented in the last week. And here I’d like to give a warm welcome to the news. Discovery Advanced subdomain search

nimbusec

Christmas Release 🎄🍻

The first snow is falling and with it a long called feature -> Timezone Support is finally here, and Discovery is faster than ever also for big reports! Nimbusec

nimbusec

Updated Plesk Extension

Our Plesk extension got an update. To make it short: it is the best extension we developed so far and we are far from stopping. Changes: Version bump to 2.

nimbusec

Nimbusec refreshed

Anniversary Release! We have had our 4th anniversary in March. And looking back those years a lot happened in the background, but only few things on the frontend. Until now.

server agent

Update nimbusec Plesk Agent

Due our plesk extension does not really update our server agent, but it has to be done from time to time there is an easy way to accomplish this task.

ssl-certificate

Intermediate certificate expiring > update Server Agent < v8

The intermediate certificate our server agent uses to talk with our servers will expire in November 2016. In newer agent versions since version 8, the updated certificate is already included. All older versions need to be updated. Find out agent version First you need

Release

Release 2016-09-26

There came some little but nice to have changes within the last release deployment. Roundup: Change domain settings (landingpage, scheme) quickly Improved notification settings Combined similar results into one And some smaller ones: Display mobile screenshot in PDF report Sync information in mails and

Switch from 3-colored notifications to 2-coloredSwitch from 3 to 2 colors for alerting

Last week the new email design was presented. This week another improvement has been achieved. We switch from our 3-colored notifications to just 2-colors: Red Alert (): As the name says,

email

Email Notifications - old channel, new qualityEmail Notifications - Old Channel, New Quality

These days we deploy new refactored mail notification feature. Someone may think, why is email such a big deal? The short answer: it is the one and most accepted notification

Nimbusec meets Namecheap

This thursday nimbusec launched in the marketplace of Namecheap. It is the first integration as such in a marketplace like this and brings our award winning website security solution in