Viewing profile — hkr_mag

For those who is new to the world of SSRF vulnerabilities, check the SSRF Bible (full disclaimer: I'm with Wallarm): https://docs.google.com/document/d/1v1TkWZtrhzRLy0bYXBcdLUed...…

This is a list of what you can do for application security with Nginx (mostly with open source tools): https://github.com/wallarm/awesome-nginx-security My talk from Nginx conferen…

Awesome job, guys! We have several team members (mostly sales) using Polymail as a default email client.

One of the most promising companies among the whole S16 batch. Congatz!

+1. Success factor, API.ai, Evernote — three logos from my memory

The main idea about Wallarm is to get inner knowledge of how the application works and how users use it. Based on this data, we craft dynamic rules for every single applications or…

Thanks!

Thanks Jason! Will be at DEFCON this year? It'll be great to meet there.

Hackerone and Bugcrowd do a great job. And we recommmend to run bug-bounty programs all the time. But companies which run fast and deploy code everyday with CI/CD (or several times…

Thanks for feedback! 1. Customers analyze traffic with locally installed NGINX-based instances (there is not DNS take-over). They send applications/traffic statistics to Wallarm Cl…

Hey there. Stepan, co-founder of Wallarm, here. Feel free to ask any questions.

It's because all the security guys (as we're) troll a lot and always skeptical (reasonably!) about blackboxes

It absolutely has. The vulnerability was detected with a vulnerability scanner built in Wallarm. As for detection of attacks, in many cases, it's much easier to identify the attack…

Pity you get it in this way. Exploit for WebSphere is just an example of a complicated case with Base64 inside XML where Wallarm can detect malicious request other WAF usually fail…

Cool. Let's catch up for a coffee than

Signal Sciences launched a bit after us. The main difference is in the result: - Guys are helping to detect anomalies and attacks, and I believe they're doing this better than regu…