Positive technologies

The main activities of Positive Technologies:

• development of software products in the field of information security: security monitoring system and compliance with MaxPatrol standards and XSpider security scanner;
• consulting and services in the field of information security (comprehensive audit of information security, penetration testing, security assessment, etc.) ^[4] ;

Positive Technologies is also the founder of the specialized portal Securitylab.ru and the organizer of the international forum on information security Positive Hack Days .

Performance indicators:

• Positive Technologies clients include government and financial institutions ^[5] , as well as telecommunication, industrial, service, retail and IT companies. Geography of customers - about 30 countries.
• In 2008, Positive Technologies received the status of QSA Associate, which allows for verification of compliance with the PCI DSS standard.
• In 2013, the company amounted to 400 people. Many of the company's employees are members of international industry associations, such as the Web Application Security Consortium and (ISC) 2.

MaxPatrol is a security and compliance control system, the main product of Positive Technologies. It is used to organize SOC, manage vulnerabilities, ensure compliance with the requirements of regulatory organizations (in particular, Federal Law No. 152-FZ "On Personal Data"). The MaxPatrol system is used by OAO Lukoil , MMC Norilsk Nickel, OAO Vympelcom, PJSC Gazprom Neft, etc.

XSpider security analysis system - an intelligent security scanner. More than 1000 Russian and foreign companies use it to analyze and control the security of corporate resources.

PT Application Inspector - the system is designed to analyze source code and identify vulnerabilities, developer errors and undeclared features in network and web applications, ERP and mobile applications at various stages of the life cycle, from development to commissioning. An intelligent system scanning engine checks the software and finds vulnerabilities, ignoring source code errors. The system is capable of checking applications written in different programming languages. By automating the entire process, the Application Inspector simplifies application security while reducing the cost of monitoring compliance.

PT Application Firewall - a self-learning dynamic firewall that reduces the risks of attacks when they occur. Using heuristic algorithms, Application Firewall examines the characteristics of traffic and the activities of users interacting with business applications, and uses the obtained data to detect potential attacks and fraud.

Thanks to the virtual patch function, Application Firewall allows you to quickly and easily configure protection while the update is being created. The system combines the traditional methods of black and white lists with the latest approach to self-learning. The product has special versions for protecting remote banking systems, ERP systems and information portals.

Positive Technologies ^[6] , one of the largest information security research centers in Europe, operates as part of Positive Technologies. The center analyzes threats and vulnerabilities, helps eliminate vulnerabilities in various information systems.

Since 2004, with the help of Positive Research experts, several hundred vulnerabilities in the products of Cisco, Google and Microsoft, as well as Avaya, Citrix, VmWare, Trend Micro, etc. have been eliminated.

The event, called Positive Hack Days, was first held in May 2011. According to experts, this is one of the main events of the Russian information security market ^[7] . The forum raises issues such as web application security, cloud computing protection, cyber warfare, critical infrastructure security, DDoS attacks, ICS security, business application protection and ERP.

Positive Hack Days also hosts international competitions for the protection of information resources in the Capture the Flag (CTF) format, in which university teams from around the world participate.

SurfPatrol is a free online service for checking the security of the browser and plugins. Unlike update management systems, the service does not check installed updates, but looks for vulnerabilities even in the latest versions of browsers and plugins. Some outdated versions of browsers and plugins may not have known vulnerabilities and be completely safe to use.

SecurityLab.ru is one of the Russian resources devoted to information security ^[8] . The portal publishes news about events in the field of information security from around the world, security bulletins of software manufacturers, analytics. The most important component of the portal is information in Russian about all published vulnerabilities with recommendations for their elimination.

• Official site
• PHDays Forum
• Website SecurityLab.ru
• Security Research Center