Great to see you’re interested in using Detectify to check your web application security! Here is a video demo to walk you through the Detectify tool to get started, add a scan profile, integration options, profile settings and show you how each of our features work. This will also show you how to use the API.

This video is proof of concept of CVE-2018-9206 Unauthenticated arbitrary file upload vulnerability and jQuery-File-upload RCE.

Detectify is a web application and domain security tool that gives you an overview of your security status and integrates into the development cycle to increase productivity. WIth a wide range of CICD integrations, Detectify makes it easy to assign remediation tasks to the right team, share security information throughout the organization, and aggregate data for effortless reporting.

Detectify is a web application and domain security tool that supports security teams in their day-to-day work. We work with 150+ handpicked ethical hackers to get access to vulnerabilities beyond the known CVE libraries that are not a sufficient test bed for modern application security.

Detectify is an automated vulnerability scanner that helps you stay on top of threats by testing your web application for 1000+ vulnerabilities. Getting started with Detectify is easy - you can get up and running in a matter of minutes.

A recent vulnerability was sent in to Detectify Crowdsource regarding an unauthenticated remote code execution (RCE) in Oracle WebLogic Server. It is easily exploited and this video shows the proof of concept.

What is CSRF and how can you fix it? Fredrik explains how CSRF is created and how it can be used to exploit a user or a website. He also provides tips on how to mitigate it.

By default emails do not have any Sender Policy Framework set. If left unattended, this leaves your company and stakeholders vulnerable to email spoofing attacks. This video explains what SPF is and what steps to take in order to configure these settings to make your email secure.

What is cross-site scripting (XSS)? Detectify security researcher and co-founder Fredrik Almroth (@Almroot) explains this common web vulnerability, how can it be executed using javascript, its impact and how to fix it.

Our second Meet The Hacker episode features none other than Fredrik Almroth, one of our founding security researchers and Head of Engineering! Some of you may know him as @almroot! At the office Fredrik is heading up our team to keep all Detectify’s users secure and our tool awesome.