Blackbox web security SAAS. There are some services out there that will scan you for vulnerabilities, but I have yet to find a really slick way to integrate security "for free" into your own servers/services. This would mean at minimum: 1. apt-get install X. Automatically decent kernel/network/firewall configuration occurs, removes cleartext passwords from ssh and changes the port, etc etc. This is just a base starti…
I have thought of building such a security as a service for websites for sometime. My PhD thesis was on building a reverse proxy server (kind of like nginx) to detect attackers (via machine learning) and starve them of CPU/network resources disproportionately (using admission control + WFQ) during a DDoS attack. After that I've spent a decade building systems to detect cyber security threats, click fraud, Twitter spammers, etc.
What do you think is lacking in existing security as a service offerings that prompted your post? Would love to chat more.