News for hackers. Stuff that matters.

ki11a11hippies

Re:Lynis – Security auditing tool for Unix/Linux systems on Monday April 27, 2015 @01:59PM (#9447995)
"Host based scans provides more in-depth audit."

I would love to hear how a host-based scanner is more in-depth than a Nessus or Rapid 7 scan running on a sudo account.

I'm not sure you are clear on what distinguishes a host based intrusion detection system, network based intrusion detection system, and antivirus. The feature list you are advertising sounds like a NIDS and HIDS, well known security software used in any secured network. I realize your software isn't antivirus like Norton or ClamAV. I am suggesting you might not be familiar with popular open source software that seems to accomplish your same feature set that large companies often use.
ITT: people care way more about the superficial qualities of security software than, ya know, security.

This looks way easier and prettier than open sourced NIDS and HIDS like snort and OSSEC, and I think that's why I'm supremely skeptical they hired enough security people versus frontent people.

I can incorporate tomorrow and call myself an IT security company.

Also, there's the distinction between security software (an app that accomplishes a security-related goal) and software security (an app that is resistant to malicious tampering). Coders for security software can often suck at software security (openssl, e.g.).